topic Re: Site to Site VPN Unable to Ping Azure VM in VM-Series in the Public Cloud

Site to Site VPN Unable to Ping Azure VM

AZCommerceAuthority — Wed, 10 May 2023 21:08:38 GMT

Hello.

I recently setup our Site to Site VPN to Azure and am having an issue with pinging to Azure from OnPrem.

The tunnel shows connected and I can ping my on Prem devices from Azure without issue.

I used this article to setup the connection: https://thetechl33t.com/2020/11/18/azure-site-to-site-vpn-with-palo-alto-firewall/

I setup the tunnel twice and the first time it worked fine but now not sure what I have done incorrectly.

Any assistance with this would be very much appreciated so feel free to let me know what I can do to assist getting this resolved.

Re: Site to Site VPN Unable to Ping Azure VM

seb_rupik — Thu, 11 May 2023 08:35:20 GMT

Hi there,

The fact you can ping in one direction proves, as you say, that the VPN is working, but also the routing between those subnets. Since the initialisation of the traffic flow is only working in one direction suggests this may be a security policy issue.

Can you confirm that inter-zone policy between the VPN and 'inside' zone exists. Also check there is an equivalent NSG in Azure on the VNET is you have it implemented.

cheers,

Seb.

Re: Site to Site VPN Unable to Ping Azure VM

AZCommerceAuthority — Mon, 15 May 2023 15:32:54 GMT

I am sure the issue is with my zone configuration.

Any chance you could show me how to create an inside zone that would work for what I am trying to do?