Hey everyone, I'm looking for some help with setting up an IPSec VPN in Azure. My goal is to connect my on-premises network, including firewalls and VMs, to Azure using this VPN method. I'm curious about a few things: what's the best way to get this done? Are there common pitfalls I should be aware of? And what best practices should I follow for security and performance? Thanks for any advice!
2 Answers
The best way to set this up is to follow the official documentation. Make sure you're familiar with BGP or other dynamic routing protocols that your setup will require. Knowing exactly what you want from the connection is also crucial.
What specific docs are you talking about? I'd love to check them out!
Start by creating a Virtual Network Gateway and a Local Gateway with your on-prem IP and firewall subnet. Then link these with a connection. Make sure to use the most secure protocols available in your IPSec policy. Here's a handy guide to get you going: [Azure VPN Gateway Tutorial](https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-create-gateway-portal).
Is dynamic routing really necessary? Can't you just use a static address space for your on-prem resources?