Deploy VPN Profile - Azure P2S Radius Authentication

%3CLINGO-SUB%20id%3D%22lingo-sub-2261657%22%20slang%3D%22en-US%22%3EDeploy%20VPN%20Profile%20-%20Azure%20P2S%20Radius%20Authentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2261657%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20building%20a%20PoC%20for%20a%20client%20for%20Azure%20P2S%20VPN%20and%20I'm%20stuck%20on%20utilizing%20Intune%20to%20deploy%20the%20profile%20properly%20to%20Intune%20managed%20devices.%20I%20have%20a%20custom%20XML%20which%20deploys%20the%20profile%20but%20it%20is%20not%20populating%20the%20Virtual%20Gateway%20FQDN%20in%20the%20server%20address%20field.%20Once%20I%20copy%2Fpaste%20the%20FQDN%20to%20server%20address%2C%20it%20works%20fine.%20Can%20anyone%20review%20the%20below%20XML%20and%20let%20me%20know%20what%20changes%20I%20would%20need%20to%20make%20to%20ensure%20the%20FQDN%20is%20populated%20in%20the%20profile%20on%20a%20Windows%2010%20computer%3F%20Thank%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CSPAN%3E%3C%2FSPAN%3E%3CSPAN%3Exml%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3Bversion%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%221.0%22%3C%2FSPAN%3E%3CSPAN%3E%3F%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EVPNProfile%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDnsSuffix%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Edomain.local%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDnsSuffix%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ENativeProfile%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EServers%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Eazuregateway-%26lt%3B%26gt%3B.vpn.azure.com%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EServers%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ENativeProtocolType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3EIKEv2%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ENativeProtocolType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAuthentication%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EUserMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EUserMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EConfiguration%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEapHostConfig%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapHostConfig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapHostConfig%3C%2FA%3E%22%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEapMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%3C%2FA%3E%22%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E26%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EVendorId%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%3C%2FA%3E%22%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E0%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EVendorId%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EVendorType%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%3C%2FA%3E%22%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E0%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EVendorType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAuthorId%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapCommon%3C%2FA%3E%22%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E0%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EAuthorId%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEapMethod%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EConfig%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapHostConfig%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FEapHostConfig%3C%2FA%3E%22%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FBaseEapConnectionPropertiesV1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FBaseEapConnectionPropertiesV1%3C%2FA%3E%22%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E26%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EEapType%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3Exmlns%3C%2FSPAN%3E%3CSPAN%3E%3D%3C%2FSPAN%3E%3CSPAN%3E%22%3CA%20href%3D%22http%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FMsChapV2ConnectionPropertiesV1%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.microsoft.com%2Fprovisioning%2FMsChapV2ConnectionPropertiesV1%3C%2FA%3E%22%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EUseWinLogonCredentials%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Efalse%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EUseWinLogonCredentials%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEapType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EConfig%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3EEapHostConfig%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EConfiguration%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EEap%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%3CSPAN%3EAuthentication%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ERoutingPolicyType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3ESplitTunnel%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ERoutingPolicyType%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ENativeProfile%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EAlwaysOn%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EAlwaysOn%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ERememberCredentials%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3Etrue%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3ERememberCredentials%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3ETrustedNetworkDetection%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3CSPAN%3ETrustedNetworkDetection%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDomainNameInformation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDomainName%3C%2FSPAN%3E%3CSPAN%3E%26gt%3Bdomain%3C%2FSPAN%3E%3CSPAN%3E.local%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDomainName%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%3EDnsServers%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E10.x.x.x%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EDnsServers%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%3CSPAN%3EDomainNameInformation%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%3CSPAN%3EVPNProfile%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2261657%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
New Contributor

Hello all,

 

I am building a PoC for a client for Azure P2S VPN and I'm stuck on utilizing Intune to deploy the profile properly to Intune managed devices. I have a custom XML which deploys the profile but it is not populating the Virtual Gateway FQDN in the server address field. Once I copy/paste the FQDN to server address, it works fine. Can anyone review the below XML and let me know what changes I would need to make to ensure the FQDN is populated in the profile on a Windows 10 computer? Thank you.

 

 

<?xml version="1.0"?>
<VPNProfile>
  <DnsSuffix>domain.local</DnsSuffix>
  <NativeProfile>
<Servers>azuregateway-<>.vpn.azure.com</Servers>
<NativeProtocolType>IKEv2</NativeProtocolType>
<Authentication>
  <UserMethod>Eap</UserMethod>
  <Eap>
    <Configuration>
     <EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig"><EapMethod><Type xmlns="http://www.microsoft.com/provisioning/EapCommon">26</Type><VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId><VendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType><AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</AuthorId></EapMethod><Config xmlns="http://www.microsoft.com/provisioning/EapHostConfig"><Eap xmlns="http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1"><Type>26</Type><EapType xmlns="http://www.microsoft.com/provisioning/MsChapV2ConnectionPropertiesV1"><UseWinLogonCredentials>false</UseWinLogonCredentials></EapType></Eap></Config></EapHostConfig>
    </Configuration>
  </Eap>
</Authentication>
<RoutingPolicyType>SplitTunnel</RoutingPolicyType>
  </NativeProfile>
  <AlwaysOn>true</AlwaysOn>
  <RememberCredentials>true</RememberCredentials>
  <TrustedNetworkDetection></TrustedNetworkDetection>
  <DomainNameInformation>
<DomainName>domain.local</DomainName>
<DnsServers>10.x.x.x</DnsServers>
</DomainNameInformation>
</VPNProfile>
0 Replies