Share via

Issue with my Azure Site to Site VPN

Kiransuryavamshi-1246 40 Reputation points
2025-01-10T18:59:45.0566667+00:00

Hello

I have deployed a VNet in azure which contains VPN gateway and Local network gateway. Made a connection between VPN and Local network gateway and I think I have made a proper configuration from my On-prem environment side, but the connection status is in disconnected or unknown state.

Could you please give me some inputs to overcome this issue.

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,609 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,590 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Sai Prasanna Sinde 2,860 Reputation points Microsoft Vendor
    2025-01-10T20:17:41.11+00:00

    Hi @Kiransuryavamshi-1246,

    Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

    We understand that you are facing issues with your site-to-site vpn connection.

    • Please follow this troubleshooting document and see if could identify the cause of the issue.
    • Please consider the additional troubleshooting steps below to further investigate this problem.
    1. Could you please verify if the pre-shared key shared in both environments is correct?
    2. Please verify the address space mentioned in the Local Network Gateway and ensure it is not overlapping.
    3. Please use the below document to troubleshoot the VPN gateway issues using diagnostic logs. Refer: https://zcusa.951200.xyz/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics
    4. Please make sure you have not used the NSGs on your gateway subnet level. The NSG on the gateway subnet are not supported. Associating a network security group to this subnet might cause your virtual network gateway to stop functioning as expected.
    5. Perform continuous pings from the on-premises network to Azure and then gather packet captures.
    6. Please check IKE logs. It would be helpful to check these logs while conducting the ping test.
    7. Refer: https://zcusa.951200.xyz/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics#IKEDiagnosticLog
    8. To resolve the problem, first, try to reset the Azure VPN gateway and reset the tunnel from the on-premises VPN device. Kindly let us know in the comments below if the above helps or you need further assistance on this issue. If it was helpful, please click "Upvote and Accept Answer" on this post to let us know. Thanks, Sai.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.