AZURE Site-To-Site Setup (with screenshots)

Product Discussion Peplink Balance
,
1

Has anyone successfully established a connection to Azure? I am following their walk-thru. Oh yeah - and the endpoint device is an RRAS vm.

Perhaps my config is off on the Peplink. I have removed the Active flag for now, but in case you notice that it is not ticked in the IPsec VPN Profile screenshot - yes I did enable it :slight_smile:

PEP_IPsecVPNProfile
PEP_IPsecVPNProfile963×1027 108 KB

PEP_PortFWDing
PEP_PortFWDing993×443 50.2 KB

PEP_IPsecNat-T
PEP_IPsecNat-T993×855 130 KB

PEP_AccessRules
PEP_AccessRules990×646 86.1 KB

PEP_IPsecLog
PEP_IPsecLog1004×608 63.2 KB

PEP_Status

2 Likes
2

UPDATE

I added the following rules and the RRAS + the Azure Gateway connection fired right away. Now, I need to figure out how to get my users in via this same gateway. My goal is to create an SSTP VPN connection to Azure that tunnels into my On-Prem.

INBOUND through Public IP of OnPrem Router/VPN Device
Traffic to the VPN device (incoming from the Internet):

  • Destination IP address of the VPN device and IP protocol 50
  • Destination IP address of the VPN device and UDP destination port 500
  • Destination IP address of the VPN device and UDP destination port 4500

OUTBOUND to Public IP of Azure Gateway
Traffic from the Router/VPN Device (outgoing to the Internet):

  • Source IP address of the VPN device and IP protocol 50
  • Source IP address of the VPN device and UDP source port 500
  • Source IP address of the VPN device and UDP source port 4500