Forum Discussion
Site-to-Site VPN using L2TP/IPSec
Azure does not support L2TP/IPSec for Site-to-Site VPN connections. Azure VPN Gateway only supports IPsec/IKE (IKEv1 and IKEv2) protocols for S2S tunnels.
You may consider:
1. Switch the remote site to IPsec/IKE
• If you control the remote VPN device, configure it to use IPsec/IKEv2.
• Follow this: About VPN devices for connections - Azure VPN Gateway | Microsoft Learn
2. Use a third-party NVA (Network Virtual Appliance)
• Deploy a VM-based VPN appliance in Azure that supports L2TP/IPSec.
• These can act as L2TP endpoints and bridge traffic to your Azure VNet.
3. Use Point-to-Site VPN with L2TP/IPSec (limited)
• Azure supports L2TP/IPSec for Point-to-Site (P2S) VPNs, but only for Windows clients.
• This is not suitable for gateway-to-gateway setups.