Skip to main content
njward
New Member
September 16, 2016
Solved

Azure VPN

  • September 16, 2016
  • 2 replies
  • 3131 views

Hello

I'm really struggling to get a VPN up and running between our 100D with firmware version 5.2.4. and Azure.  I have followed a number of instructions but none seem to work.  The Azure end was created using resource manager.  When I look in the logs I just see IPsec phase 1 errors.  My config looks like this.  any help would be much appreciated.

 

 

config vpn ipsec phase1-interface

next

    edit "Azure_P1"

    set interface "wan2"

    set ike-version 2

    set keylife 28800

    set proposal aes256-sha256 aes256-sha1 aes128-sha256 aes128-sha1

    set dhgrp 2

    set remote-gw xxx.xxx.xxx.xxx

    set psksecret ENC xxxxxx

 next

end

config vpn ipsec phase2-interface

next

    edit "Azure_P2"

    set phase1name "Azure_P1"

    set proposal aes256-sha256 aes256-sha1 aes128-sha256 aes128-sha1

    set dhgrp 1

    set auto-negotiate enable

    set keylife-type both

    set keylifeseconds 3600

    set keylifekbs 102400000

    set src-subnet xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx

    set dst-subnet xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx

 next

end

config router static edit 1

     set dst <Azure internal IP address range>

     set device "Azure_P1"

 next

end

    Best answer by MikePruett

    Do you have the other sides config as well?

    2 replies

    njward
    njwardAuthor
    New Member
    September 16, 2016

    Hello, I have now resolved this.  I was being stupid, I had not configured my policies correctly.

     

    Nick

    MikePruett
    New Member
    September 16, 2016

    Do you have the other sides config as well?