Forum Discussion

Copper Contributor

Oct 31, 2023

Solved

On-prem connect with S2S VPN to Azure / users on P2S to Azure cannot connect to S2S on-prem resourc

Hi! I am trying to configure so that P2S users can access resources over at S2S end. S2S is working and onprem can access VM at Azure. Also P2S can access VM at Azure and from that VM ofcourse acce...

azure

networking

J-La026
Nov 02, 2023
I got it working in the end, issue was with onprem firewall S2S configuration in the regards of the P2S subnet phase2 encryption/authentication and pfs. So BGP was not needed.

JeremyWallace

Brass Contributor

Nov 02, 2023

J-La026
That does seem to be the case as BGP being enabled is referenced in multiple Microsoft documents related to the scenario and in this document specifically referencing a 'users need access to resource in Azure and/or on-prem resources' use case: https://learn.microsoft.com/en-us/azure/vpn-gateway/work-remotely-support

Also keep in mind whenever you make changes to configurations a new point-to-site vpn profile needs to be downloaded from the azure portal to get the updated configurations.

J-La026

Copper Contributor

Nov 02, 2023

I got it working in the end, issue was with onprem firewall S2S configuration in the regards of the P2S subnet phase2 encryption/authentication and pfs. So BGP was not needed.

Keith_Harrison
Copper Contributor
May 15, 2024
J-La026 In regards to
"I got it working in the end, issue was with onprem firewall S2S configuration in the regards of the P2S subnet phase2 encryption/authentication and pfs. So BGP was not needed."

Could you please elaborate on what you changed on the onprem firewall? It sounds like you are using PFSense onprem and I have this exact issue that I've been fighting for a couple of days.

Thank you for any feedback.
JeremyWallace
Brass Contributor
Nov 02, 2023
Ah got it! Good to know BGP is not required, and glad you got it working!