Azure: Connecting Networks with a Site-to-Site VPN

From Course: Implementing Azure Network Security
➔ cloudacademy.com/course/imple...

[@gastoncacheffo]

Your are the clearest explainer ever!

[@kabookeo]

Just what I needed and expertly explained. Thank you!

[@Southpaw07]

Very crisp explanation. TY!

[@vaibhavrana4953]

very good video. Clarified my understanding.

[@mohammedmustafaali1049]

I loved this, very neat and clean. don't we need to add a static route on azure for on-perm address?

[@daye1997]

Great video. Should I create a separate resource group for the Virtual Network Gateway and associate the existing Vnet which already belongs to another resources group? ( created a new subnet for the virtual network gateway)? I then create the local network with the same resource group of the Vnet gateway?

[@sgtfatboy1]

Thank you, you just save my A$$ on a job that i have been at for months! Keep up the great work!

[@aleb128]

Great video! Thank you!

[@robertradi7364]

Suppose I have a subnet with range of 10.101.0.0/16 in the VNET. While I am creating the local network gateway I use the same IP range for the address space. Is it a problem?

[@thomasmitchell2264]

That would normally be a problem, since you would have two overlapping networks.

[@TheKida2293]

Hello, i have a question, if the scripts generares the phase1 with sha256 and the on prem device only supports sha1, is it ok for the tunnel to come up? Thanks

[@thomasmitchell2264]

That would be a question better-directed to the vendor of your preferred device.

[@lmb25315]

Great video! I have a question, I'm hoping you can possibly answer fast lol. The local network gateway IP for that "on-prem" firewall, should that be a public facing IP? I would think so because we haven't given a way for that S2S connection to travel from your VNET gateway, which is a public IP, to that Local gateway. If not, where is the entry point from your VNET gateway to the local Net Gateway? Thanks!

[@withoutcrew]

1:33 On premises Site 1 has adresses with 5 octets...

[@Southpaw07]

gotta love the comments, repeated questions about on-prem device setup. Lol . check your vendor setup, seriously the setup it not that difficult

[@davt8355]

Thank you for your video! My friend you missed the main point of your video! On-prem router configuration, it is certainly an important part of the the whole subject.

[@thomasmitchell2264]

The main point of the video is to explain how to configure a VPN in Azure. The configuration of the on-prem device will vary, depending on the device. Since there are many different on-prem VPN devices available, it really serves no purpose to show the configuration of just one in this video.

[@tranduy4070]

We missed the configuration part. At least for your device. That is the hardest part of this video :(

[@thomasmitchell2264]

The configuration of the on-prem device will vary, depending on the device. Since there are many different on-prem VPN devices available, it really serves no purpose to show the configuration of just one in this video.

[@eemo2093]

Also most vendors, for example PaloAlto - has a guide on how to configure the VPN part. Check your device mfg for the information on that one.

[@karderkabir8197]

Thank you for uploading however as already mentioned by someone, a site-to-site video should show configuration on both sides. Or the video title should be changed to reflect this...a time waster for people looking to find a complete instruction.