• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 81
  • Last Modified:

Azure VPN question

Hello,

Am i able to set up a point to site VPN from my lab to azure in order to extend my lab's domain to Azure? I don't or can't use a site from my lab, so wondering what my options are? I have Azure sub
Thank you
0
Jason Thomas
Asked:
Jason Thomas
  • 4
  • 3
  • 3
1 Solution
 
Cliff GaliherCommented:
What do you meant you don't or can't use a site? The basic conditions for a VPN are the same, regardless of whether it is point to point, point to site, or site to site. So that sort of doesn't make sense.
0
 
Jose Gabriel Ortega CCEO J0rt3g4 Consulting ServicesCommented:
There are 2 options:
Point to Site (P2S),  you will need to generate a certificate and install it on the Azure portal and client to do that. So yeah it's possible.

How to create a Point To Site. (AzureRM, Cli, and Powershell)
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal

Site to Site (S2S) this connection requires to set up an Azure Gateway and network mapping from azure to the router on-prem and from the on-prem hardware to the Azure gateway.

How to create a Site to site.
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
0
 
Jason ThomasAuthor Commented:
Thank you both. So from my lab, I'm right in thinking I can't opt for site to site? I thought there was an approved list of gateway devices, where as I am using my Virgin router.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Jose Gabriel Ortega CCEO J0rt3g4 Consulting ServicesCommented:
Yes, there is a list, look at here: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices

Look for your Virgin router but I have never heard of them
0
 
Cliff GaliherCommented:
The standards for VPN are pretty well established. You don't have to use a validated device (your due of the word approved implies you would), but a validated device has been tested to meet certain r criteria and is therefore beneficial for people shopping and want guaranteed compatibility.
0
 
Jason ThomasAuthor Commented:
Perhaps i can rephrase. I cannot use site-to-site from a home lab. So, my question. If a create a Point to site connection, will this be enough to extend my lab domain to azure by way of deploying a domain controller to Azure? Thank you.
0
 
Cliff GaliherCommented:
Probably not. Point to site is exactly that. But what you describe about wanting to extend your lab) multiple machines implied) is a site to site. Which circles back to my initial statement that your question didn't entirely make sense. Why can't you do a site to site?
0
 
Jose Gabriel Ortega CCEO J0rt3g4 Consulting ServicesCommented:
Not exactly, the point to site connection is just to connect punctually to the Azure virtual network and do some work but if you need any resource in the Azure virtual network side, you would need to manually connect to the point to site, work and then disconnect. It works for people that are outside the network and that requires access to the Azure resources (VM (DC,DB,Etc), storage, etc) but it's not meant to be a permanent solution.

But if you can pay the pain of connecting and disconnecting worth the test, but remember that for get connected to the Azure VM you need to enable the VPN before accessing any service, for this reason is not viable to create a DC in azure and try to access it using Point2Site, because the Domain controller won't be accessible until you're logged and connected to the VPN.
0
 
Jason ThomasAuthor Commented:
Many thanks. After spending the last 3 hours reading about Azure VPN, I realise i didn't have the experience to ask a proper question - so, well done for attempting :) I have now setup my P2S connection and am further down the learning trail.
0
 
Jose Gabriel Ortega CCEO J0rt3g4 Consulting ServicesCommented:
I'm glad to help
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 4
  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now