Azure VPN

[njward]

Hello

I'm really struggling to get a VPN up and running between our 100D with firmware version 5.2.4. and Azure.  I have followed a number of instructions but none seem to work.  The Azure end was created using resource manager.  When I look in the logs I just see IPsec phase 1 errors.  My config looks like this.  any help would be much appreciated.

config vpn ipsec phase1-interface

next

    edit "Azure_P1"

    set interface "wan2"

    set ike-version 2

    set keylife 28800

    set proposal aes256-sha256 aes256-sha1 aes128-sha256 aes128-sha1

    set dhgrp 2

    set remote-gw xxx.xxx.xxx.xxx

    set psksecret ENC xxxxxx

 next

end

config vpn ipsec phase2-interface

next

    edit "Azure_P2"

    set phase1name "Azure_P1"

    set proposal aes256-sha256 aes256-sha1 aes128-sha256 aes128-sha1

    set dhgrp 1

    set auto-negotiate enable

    set keylife-type both

    set keylifeseconds 3600

    set keylifekbs 102400000

    set src-subnet xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx

    set dst-subnet xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx

 next

end

config router static edit 1

     set dst <Azure internal IP address range>

     set device "Azure_P1"

 next

end

[njward]

Hello, I have now resolved this.  I was being stupid, I had not configured my policies correctly.

Nick

[MikePruett · Accepted solution]

Do you have the other sides config as well?