Forum Discussion

Copper Contributor

May 19, 2019

Route Internet traffic through Ipsec tunnel.

Hi Everyone. I need an architecture model for Routing internet traffic from vnet A to Firewall which is in vnet B. Both vnets are in different region and connected by IPsec tunnel. I have tried us...

Copper Contributor

May 24, 2019

Hannes_LG

Hi,

I can't share much of info, but for your understanding I have already mentioned all the information in my question. For internal communication (private traffic), traffic will go through IPsec tunnel. DMZ subnet is in vnet B, so we use UDR to route all internet traffic from vnet B to firewall ip in DMZ subnet but for vnet A internet traffic i need your help.

Hannes_LG

Brass Contributor

Jun 03, 2019

Hi,

sry for the late reply.
To bind a 0.0.0.0/0 route to a gateway subnet isn’t supported so please remove that one.
Change UDR1:
0.0.0.0/0 next hop virtual appliance IP
Bind to each subnet in vnet a (important not to the gateway subnet!)

Change UDR2:
0.0.0.0/0 next hob virtual appliance IP
Bind to each subnet in vent b (important not to the gateway subnet!)

On Gateway in vnet a activate „use remote gateway“
On Gateway in vnet b activate „ gateway transit“

I guess that solution should fix your issue but I don’t have time (at the Moment) to test it.

Regards,
Hannes