Skip to main content
njward
New Member
September 16, 2016
Solved

Azure VPN

  • September 16, 2016
  • 2 replies
  • 3145 views

Hello

I'm really struggling to get a VPN up and running between our 100D with firmware version 5.2.4. and Azure.  I have followed a number of instructions but none seem to work.  The Azure end was created using resource manager.  When I look in the logs I just see IPsec phase 1 errors.  My config looks like this.  any help would be much appreciated.

 

 

config vpn ipsec phase1-interface

next

    edit "Azure_P1"

    set interface "wan2"

    set ike-version 2

    set keylife 28800

    set proposal aes256-sha256 aes256-sha1 aes128-sha256 aes128-sha1

    set dhgrp 2

    set remote-gw xxx.xxx.xxx.xxx

    set psksecret ENC xxxxxx

 next

end

config vpn ipsec phase2-interface

next

    edit "Azure_P2"

    set phase1name "Azure_P1"

    set proposal aes256-sha256 aes256-sha1 aes128-sha256 aes128-sha1

    set dhgrp 1

    set auto-negotiate enable

    set keylife-type both

    set keylifeseconds 3600

    set keylifekbs 102400000

    set src-subnet xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx

    set dst-subnet xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx

 next

end

config router static edit 1

     set dst <Azure internal IP address range>

     set device "Azure_P1"

 next

end

    Best answer by MikePruett

    Do you have the other sides config as well?

    2 replies

    njward
    njwardAuthor
    New Member
    September 16, 2016

    Hello, I have now resolved this.  I was being stupid, I had not configured my policies correctly.

     

    Nick

    MikePruett
    New Member
    September 16, 2016

    Do you have the other sides config as well?

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!