Internet access over P2S VPN connection

Question

Internet access over P2S VPN connection

Mateusz Kuchniak 6

Hey,

Is it possible to get internet access over the P2S vpn ( VPN Gateway or VWAN with Virtual Hhub ) I want be able to access the resources within Azure VNET as well as access Internet using the P2S connection, whihc will change my computer IP and regions depending on which VPN I'm connecting to.

Kind Regsards

Burak Cetin 1 Reputation point

2022-11-17T05:20:28.93+00:00

Hi @Mateusz Kuchniak , we you able to resolve this issue? I am running into the same issue. On my MacBook, I can connect to VPN and Internet, but on my Windows machine I can't connect to the internet when the VPN is on. None of my co-workers have the same issue, so I kinda have to connect/discconect constantly to be able to do work.
I have been looking for answers on the internet but none of them worked yet.
ChaitanyaNaykodi-MSFT 27,386 Reputation points Microsoft Employee Moderator

2022-12-01T16:55:22.06+00:00
@Burak Cetin ,

If it helps you can refer to below threads with similar issues and see if it helps troubleshoot the issue.

https://learn.microsoft.com/en-us/answers/questions/874260/internet-not-working-when-i-use-azure-vpn-point-to.html

https://learn.microsoft.com/en-us/answers/questions/876308/internet-access-does-not-working-after-connecting.html
Burak Cetin 1 Reputation point

2022-12-01T20:19:33.327+00:00

Hi,

The VPN issue is resolved for me. I actually did not work on the original problem. All I had to do was to go to our Virtual network gateway resource on Azure portal and download the VPN client through there. it is not user friendly though, I waited a few minutes until the download started. I remember visiting this resource and seeing the download button, but probably since it did not respond immediately I skipped it. Once I installed the client, then I was able to connect to the VPN and keep connected to the internet at the same time.

I am not sure if other people are using Virtual network gateway as their VPN server, but I hope this helps.

Thank you for your reply.
Moe Khalil 0 Reputation points

2023-03-02T12:10:00.1666667+00:00

@Burak Cetin that is the default setup. Internet works when connected, but it is going over your private internet service provider and not through Azure. The P2S VPN is only using Azure when connecting to IP's that match your Subnet (i.e a VM in your Gateway's vNet or Peered vNets).

NAT is required for internet and NAT is supported for IPsec/IKE cross-premises connections only. VNet-to-VNet connections or P2S connections aren't supported. You need a VM for a VPN that both forwards Private and Public IPs.
Burak Cetin 1 Reputation point

2023-03-02T16:53:11.55+00:00
Thank you for the explanation, it makes sense.

On the other hand, we do not have to use any specific tool for Mac. We just use Mac's built-in VPN function.

Configurations we provide:

IKEv2

Server address

Remote ID (same value as Server address)

Machine Authentication: Certificate (personal certificates created using the root certificate)

And it just works as expected. We can connect to the resources in Azure and connect to the internet at the same time. But this is not the case with Windows's built-in VPN function. We have to download a VPN client from Azure Portal.

Do you have any insights about this?

2 answers

Your answer

Burak Cetin 1 Reputation point

2022-11-17T05:20:28.93+00:00

Hi @Mateusz Kuchniak , we you able to resolve this issue? I am running into the same issue. On my MacBook, I can connect to VPN and Internet, but on my Windows machine I can't connect to the internet when the VPN is on. None of my co-workers have the same issue, so I kinda have to connect/discconect constantly to be able to do work.
I have been looking for answers on the internet but none of them worked yet.
ChaitanyaNaykodi-MSFT 27,386 Reputation points Microsoft Employee Moderator

2022-12-01T16:55:22.06+00:00

@Burak Cetin ,

If it helps you can refer to below threads with similar issues and see if it helps troubleshoot the issue.

https://learn.microsoft.com/en-us/answers/questions/874260/internet-not-working-when-i-use-azure-vpn-point-to.html

https://learn.microsoft.com/en-us/answers/questions/876308/internet-access-does-not-working-after-connecting.html
Burak Cetin 1 Reputation point

2022-12-01T20:19:33.327+00:00

Hi,

The VPN issue is resolved for me. I actually did not work on the original problem. All I had to do was to go to our Virtual network gateway resource on Azure portal and download the VPN client through there. it is not user friendly though, I waited a few minutes until the download started. I remember visiting this resource and seeing the download button, but probably since it did not respond immediately I skipped it. Once I installed the client, then I was able to connect to the VPN and keep connected to the internet at the same time.

I am not sure if other people are using Virtual network gateway as their VPN server, but I hope this helps.

Thank you for your reply.
Moe Khalil 0 Reputation points

2023-03-02T12:10:00.1666667+00:00

@Burak Cetin that is the default setup. Internet works when connected, but it is going over your private internet service provider and not through Azure. The P2S VPN is only using Azure when connecting to IP's that match your Subnet (i.e a VM in your Gateway's vNet or Peered vNets).

NAT is required for internet and NAT is supported for IPsec/IKE cross-premises connections only. VNet-to-VNet connections or P2S connections aren't supported. You need a VM for a VPN that both forwards Private and Public IPs.
Burak Cetin 1 Reputation point

2023-03-02T16:53:11.55+00:00

Thank you for the explanation, it makes sense.

On the other hand, we do not have to use any specific tool for Mac. We just use Mac's built-in VPN function.

Configurations we provide:

IKEv2

Server address

Remote ID (same value as Server address)

Machine Authentication: Certificate (personal certificates created using the root certificate)

And it just works as expected. We can connect to the resources in Azure and connect to the internet at the same time. But this is not the case with Windows's built-in VPN function. We have to download a VPN client from Azure Portal.

Do you have any insights about this?

Answer 1

KurtBMayer 841

@Mateusz Kuchniak

You could try enabling Force Tunneling on the P2S VPN. See: Configure forced tunneling for Virtual WAN Point-to-site VPN.

Please upvote or accept this thread as answered if it's helpful, thanks!

Mateusz Kuchniak 6 Reputation points

2022-08-30T15:22:12.167+00:00

Hey,

I'm trying to use force tunnelling with the Firewall manager + secure hub. 0.0.0.0/0 route is advertised but once I connect internet connection doesn't work and I can't ping anything outside of the VNET I'm connected to. Do you have any more step-by-step guides on how to configure?
Gregory Suvalian 5 Reputation points

2024-10-01T15:44:26.3033333+00:00

You can not access Internet via P2S VPN, regardless which routes you add
https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes#:~:text=Internet%20connectivity%20is%20not%20provided%20through%20the%20VPN%20gateway.%20As%20a%20result%2C%20all%20traffic%20bound%20for%20the%20Internet%20is%20dropped.

Answer 2

Tchimwa Sougang 946 Microsoft Employee

Thanks @Mateusz Kuchniak for your question. Unfortunately, I do not think it is possible. Remember, having Internet is a requirement for your Point-to-site connection first. Getting Internet from Azure through your P2S is not something possible.
However, providing Internet for your Azure VMs is possible on Site-to-Site VPN connection with force tunnelling but that is not what you are looking for.

Mateusz Kuchniak 6 Reputation points

2022-08-30T15:24:07.357+00:00

Hey,

Maybe I should explain more clearly. I have internet and I can connect to the Azure VPN. What I want is my IP change and location to the VPN where it's hosted. So once I connect to the VPN I can browse the internet through the VPN with the VPN IP and location.

Kind Regards
Asad Rehman 1 Reputation point

2022-12-15T20:23:42.11+00:00

Hi MateuszKuchniah,

Were you able to find a solution, I have the same situation. Secured Hub, with Azure Firewall, P2S has the 0.0.0.0/0 route advertised but once I connnect to VPN I am not able to get to the internet or any website.
Gregory Suvalian 5 Reputation points

2024-10-01T15:44:52.5966667+00:00

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes#:~:text=Internet%20connectivity%20is%20not%20provided%20through%20the%20VPN%20gateway.%20As%20a%20result%2C%20all%20traffic%20bound%20for%20the%20Internet%20is%20dropped.

Share via

Internet access over P2S VPN connection

2 answers

Your answer