Issue with my Azure Site to Site VPN

Question

Hello

I have deployed a VNet in azure which contains VPN gateway and Local network gateway. Made a connection between VPN and Local network gateway and I think I have made a proper configuration from my On-prem environment side, but the connection status is in disconnected or unknown state.

Could you please give me some inputs to overcome this issue.

Answer 1

Hi @Kiransuryavamshi-1246,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

We understand that you are facing issues with your site-to-site vpn connection.

• Please follow this troubleshooting document and see if could identify the cause of the issue.
• Please consider the additional troubleshooting steps below to further investigate this problem.

1. Could you please verify if the pre-shared key shared in both environments is correct?
2. Please verify the address space mentioned in the Local Network Gateway and ensure it is not overlapping.
3. Please use the below document to troubleshoot the VPN gateway issues using diagnostic logs. Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics
4. Please make sure you have not used the NSGs on your gateway subnet level. The NSG on the gateway subnet are not supported. Associating a network security group to this subnet might cause your virtual network gateway to stop functioning as expected.
5. Perform continuous pings from the on-premises network to Azure and then gather packet captures.
6. Please check IKE logs. It would be helpful to check these logs while conducting the ping test.
7. Refer: https://learn.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics#IKEDiagnosticLog
8. To resolve the problem, first, try to reset the Azure VPN gateway and reset the tunnel from the on-premises VPN device. Kindly let us know in the comments below if the above helps or you need further assistance on this issue. If it was helpful, please click "Upvote and Accept Answer" on this post to let us know. Thanks, Sai.