Hello, I have created a VPN in Azure so that I will keep my IP private and can connect to web sites in USA that do not allow connections from other countries. I ran "route print" command and I saw that traffics to virtual machines in Azure will be routed through the VPN interface. I have read a post of 2017 and I have read that was not possible (at that time) to route all traffic. I am wondering if, considering all the time passed, Azure VPN can route all traffic now. Thanks Jaime

Hello anonymous user tuardo-5606 , Apologies for the delay in response. You can direct all traffic to the VPN tunnel by advertising 0.0.0.0/1 and 128.0.0.0/1 as custom routes to the VPN clients. Reference : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes#forced-tunneling Custom routes are supported and that forces all traffic from the client to Azure. However, I want to emphasize that the VPN client will loose all connectivity to the Internet (even through the local internet breakout as all traffic will be forced to Azure). Kindly let us know if the above helps or you need further assistance on this issue. ---------------------------------------------------------------------------------------------------------------- Please " Accept the answer " below if the information helped you. This will help us and others in the community as well.

Hi Microsoft! Anything has changed after another few years? Thanks Greg

It's weird that in 2025 MS does not have a solution for this, but getting a Firewall Gateway, expensive, that we don't need, or an appliance and NAT Gateway.

Does Azure VPN allow to route all traffic now?

Accepted answer

GitaraniSharma-MSFT 49,836 Reputation points Microsoft Employee

2021-09-01T13:14:06.493+00:00

Hello anonymous usertuardo-5606 ,

Apologies for the delay in response.

You can direct all traffic to the VPN tunnel by advertising 0.0.0.0/1 and 128.0.0.0/1 as custom routes to the VPN clients.
Reference : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes#forced-tunneling
Custom routes are supported and that forces all traffic from the client to Azure. However, I want to emphasize that the VPN client will loose all connectivity to the Internet (even through the local internet breakout as all traffic will be forced to Azure).

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" below if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Jaime Stuardo 71 Reputation points

2021-09-01T13:40:21.697+00:00

Hello,

I have a question regarding this sentence:

the VPN client will loose all connectivity to the Internet

As I told, I need to browse web sites in USA through the gateway. By doing the tunneling as explained in that link, will I be able to do it?

To make this clearer. Currently I have:

My LAN ---> My ISP ---> All web sites around the world but a few in USA that only allow connections from USA

What I need is:

My LAN ---> My ISP ---> Azure network ---> All web sites around the world

Thanks
Jaime

GitaraniSharma-MSFT 49,836 Reputation points Microsoft Employee

2021-09-01T15:38:51.89+00:00

Hello anonymous usertuardo-5606 ,

You will be able to browse the Internet from the Azure VM which you connect to via P2S VPN, however the P2S client will lose Internet connectivity. So you should be able to browse web sites in USA from the connected Azure VM. However, if your requirement is to browse the web sites from the local machine where P2S client is installed with forced tunneling, it is not possible.

Kindly let us know if the above helps or you need further assistance on this issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Jaime Stuardo 71 Reputation points

2021-09-01T17:20:08.467+00:00

thanks for your answer... and you are right... I needed to browse Internet using my PC. Azure VM has Window Server, and you know what happens when Windows Server tries to browse Internet. A lot of exceptions should be added in order to browse correctly, and since that VM is used by my customers, I don't want to use it to accomplish this.

Regards
Jaime

GitaraniSharma-MSFT 49,836 Reputation points Microsoft Employee

2021-09-02T04:34:59.263+00:00

Hello anonymous usertuardo-5606 ,

Thank you for the update. Unfortunately, enabling forced tunneling on P2S VPN client will force all internet traffic being dropped by the VPN gateway and the only way to connect to Internet in this scenario would be via a connected Azure VM (which you mentioned is not feasible). However, we will share this feedback with our internal Product Group team for future improvements.

If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

John Harrington 0 Reputation points

2023-02-01T23:17:07.3666667+00:00

So...what's the step to get all traffic passing into Azure, through to the internet? Essentially, we want our Azure VPN Gateway connection to handle all traffic from the client/end-user, including internet traffic.

GitaraniSharma-MSFT 49,836 Reputation points Microsoft Employee

2023-02-02T04:05:35.5966667+00:00

@John Harrington , To route all traffic via Azure to Internet, you would need to force tunnel the VPN traffic to the VPN gateway and configure Azure Firewall manager to provide Internet connectivity via SNAT. Refer: https://learn.microsoft.com/en-us/answers/questions/1151625/help-setup-a-vpn-with-one-static-outbound-ip

Bhushan Gawale 331 Reputation points

2023-03-25T18:25:13.4133333+00:00

Hello,

I'm wondering if this scenario is supported and functional for standard Azure VNETs and clients connecting to them via P2S VPN gateway, or if it is intended only for use with Azure VWAN?

We have implemented Azure VNET and P2S connectivity using VPN gateway, and have followed all the steps including redirecting 0.0.0.0/0 to the Azure FW, as well as publishing 0.0.0.0/1 and 128.0.0.0/1 to clients. However, since making these changes, all clients have lost internet connectivity, despite the FW being configured to allow all traffic through it.

Can you please advise on what we may be missing? Any assistance on this matter would be greatly appreciated.

Bhushan Gawale 331 Reputation points

2023-04-22T04:14:33.3233333+00:00

Update - The P2S VPN gateway does not support this scenario and the only way to achieve it by using the Firewall Manager and Virtual Hubs.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Does Azure VPN allow to route all traffic now?

2 additional answers

Your answer