Azure VPN question

Hello,

Am i able to set up a point to site VPN from my lab to azure in order to extend my lab's domain to Azure? I don't or can't use a site from my lab, so wondering what my options are? I have Azure sub
Thank you
LVL 1
Jay ThomasAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
What do you meant you don't or can't use a site? The basic conditions for a VPN are the same, regardless of whether it is point to point, point to site, or site to site. So that sort of doesn't make sense.
0
Jose Gabriel Ortega CastroCEOCommented:
There are 2 options:
Point to Site (P2S),  you will need to generate a certificate and install it on the Azure portal and client to do that. So yeah it's possible.

How to create a Point To Site. (AzureRM, Cli, and Powershell)
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal

Site to Site (S2S) this connection requires to set up an Azure Gateway and network mapping from azure to the router on-prem and from the on-prem hardware to the Azure gateway.

How to create a Site to site.
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jay ThomasAuthor Commented:
Thank you both. So from my lab, I'm right in thinking I can't opt for site to site? I thought there was an approved list of gateway devices, where as I am using my Virgin router.
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Jose Gabriel Ortega CastroCEOCommented:
Yes, there is a list, look at here: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices

Look for your Virgin router but I have never heard of them
0
Cliff GaliherCommented:
The standards for VPN are pretty well established. You don't have to use a validated device (your due of the word approved implies you would), but a validated device has been tested to meet certain r criteria and is therefore beneficial for people shopping and want guaranteed compatibility.
0
Jay ThomasAuthor Commented:
Perhaps i can rephrase. I cannot use site-to-site from a home lab. So, my question. If a create a Point to site connection, will this be enough to extend my lab domain to azure by way of deploying a domain controller to Azure? Thank you.
0
Cliff GaliherCommented:
Probably not. Point to site is exactly that. But what you describe about wanting to extend your lab) multiple machines implied) is a site to site. Which circles back to my initial statement that your question didn't entirely make sense. Why can't you do a site to site?
0
Jose Gabriel Ortega CastroCEOCommented:
Not exactly, the point to site connection is just to connect punctually to the Azure virtual network and do some work but if you need any resource in the Azure virtual network side, you would need to manually connect to the point to site, work and then disconnect. It works for people that are outside the network and that requires access to the Azure resources (VM (DC,DB,Etc), storage, etc) but it's not meant to be a permanent solution.

But if you can pay the pain of connecting and disconnecting worth the test, but remember that for get connected to the Azure VM you need to enable the VPN before accessing any service, for this reason is not viable to create a DC in azure and try to access it using Point2Site, because the Domain controller won't be accessible until you're logged and connected to the VPN.
0
Jay ThomasAuthor Commented:
Many thanks. After spending the last 3 hours reading about Azure VPN, I realise i didn't have the experience to ask a proper question - so, well done for attempting :) I have now setup my P2S connection and am further down the learning trail.
0
Jose Gabriel Ortega CastroCEOCommented:
I'm glad to help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.