Share via

Multiple On-Prem VPN Devices Over ER to Azure VPN Gateway

Damen Barker 40 Reputation points
2025-02-03T15:44:49.06+00:00

Is it correct that by following the article linked below, only one tunnel will be active at a time for the "Multiple on-prem VPN Devices" setup?

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable#activeactiveonprem

Additionally, when configuring the local gateway with the BGP IP peer, is it necessary to set an IP address on the Azure side?

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,635 questions
Azure ExpressRoute
Azure ExpressRoute
An Azure service that provides private connections between Azure datacenters and infrastructure, either on premises or in a colocation environment.
410 questions
0 comments
Accepted answer
  1. Praveen Bandaru 425 Reputation points Microsoft Vendor
    2025-02-03T16:25:09.4233333+00:00

    Hello Damen Barker

    Greetings!

    Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

    We can connect multiple VPN devices for the same on-premises location simultaneously by using BGP, without BGP this is not possible.  

    • If you have multiple VPN devices in the on-premises location for the same address ranges, you need to configure multiple tunnels from your on-premises to Azure.
    • When you connect multiple VPN devices from the same on-premises network to Azure, create one local network gateway for each VPN device, and one connection from your Azure VPN gateway to each local network gateway.
    • BGP is required for this configuration.
    • Each local network gateway representing a VPN device must have a unique BGP peer IP address specified in the "BgpPeerIpAddress" property.
    • Use BGP to advertise the same prefixes of the same on-premises network prefixes to your Azure VPN gateway. The traffic is forwarded through these tunnels simultaneously.

    For BGP config:

    1. BGP needs to be enabled in three components: VPN gateway, connection, and local network gateway.
    2. When enabling BGP in the Azure VPN gateway, it will provide a BGP peer IP from the Azure side, using its gateway subnet address ranges.
    3. In the local network gateway, you need to specify your on-premises peer IP for the respective connections.

    Please refer to the article to enable BGP on the VPN gateway.
    https://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto

    I hope this has been helpful!

    Your feedback is important so please take a moment to accept answers. If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

    Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.