I’m not sure if this configuration is the best, but this seems to be working.
ip firewall nat add chain=srcnat comment="Azure VPN Tunnel" dst-address=10.200.0.0/16 log=yes src-address=192.168.1.0/24 place-before=0 So for tunnel mode to work properly you need to allow tunneled traffic before fast-track so use place-before=0Īdd chain=forward comment="Allow from Azure" dst-address=10.10.0.0/16 src-address=192.168.1.0/24 place-before=0Īdd chain=forward dst-address=192.168.1.0/24 src-address=10.10.0.0/16 place-before=0Īdd chain=input comment="Allow from Azure" log=yes protocol=ipsec-esp src-address=51.X.X.X place-belore=0 For this, you can search the Internet and study my screenshots.įast-track rule affects ipsec traffic. When you run the New-AzureRmVirtualNetworkGateway, be sure that you use the VPN type: PolicyBased. There is nothing very tricky here, you just need to be careful with the following difference: Prepare your Azure virtual net, gateway and link configuration by following the article you can find here. This is a short tutorial how to configure your MikroTik router to connect to Azure network with site-to-site VPN. You can (by using EoIP) make L2 connection to Azure network (so you can run VMs without changing IP addresses (and DNS records) which might be cool for DR solution? Unfortunately you can not do that as Azure VNet gateway captures and replies to all ARP requests so everything passes via VNet gateway (x.y.z.1) so it is not possible to extend the network as far as I was able to test.ģ.Solution home General Network MikroTik site-to-site IPsec VPN connection to Azure Resource Manager based gateway
You can use other VPN solutions to get connected to Azure networkĢ. What can you do with MikroTik router on Azure network? A lot of things:ġ. Prepare a disk image and vm image (that you will later deploy). Go to Azure portal and upload your VHD file to Blob storageĥ. Convert (in Hyper-V manager) disk from VHDX to VHD and from Dynamic to Fixed size VHD (you can do it in a single operation)Ĥ. Run it for the first time on your on-prem Hyper-V (accept licence agreement and just check the basic configuration (username / password, interface(s)).ģ. Download pre-prepared vhdx image from MikroTik downloads site,Ģ.
Yes, it is possible to do it – you just need to:ġ.
0 kommentar(er)
