Changes

Setting up a Site-to-Site IPsec Tunnel between Teltonika Networks and Microsoft Azure (view source)

Revision as of 01:06, 4 June 2024

624 bytes added ,  4 June
→‎Check Site to Site Communication
Line 8: Line 8:  
If You have trouble seeing any of the settings, be sure to enable "'''Advanced mode'''"
 
If You have trouble seeing any of the settings, be sure to enable "'''Advanced mode'''"
 
[[File:Networking rutos manual webui basic advanced mode 75.gif|none|border|center|class=tlt-border]]
 
[[File:Networking rutos manual webui basic advanced mode 75.gif|none|border|center|class=tlt-border]]
 +
 +
=Topology=
 +
 +
[[File:VNGW_TN_Topology.png|none|border|center|class=tlt-border|600px]]
    
=Prerequisite=
 
=Prerequisite=
Line 18: Line 22:     
Log into the Azure portal, search for "Virtual Network Gateways" and click on '''Create'''.
 
Log into the Azure portal, search for "Virtual Network Gateways" and click on '''Create'''.
−
      
[[File:VNGW_01.png|none|border|left|class=tlt-border|600px]]
 
[[File:VNGW_01.png|none|border|left|class=tlt-border|600px]]
Line 59: Line 62:  
----
 
----
 
In case you do not have previously created a virtual network, click on the blue URL link to create one and use the default settings as shown in the image below:
 
In case you do not have previously created a virtual network, click on the blue URL link to create one and use the default settings as shown in the image below:
−
      
[[File:VNGW_05.png|none|border|left|class=tlt-border|600px]]
 
[[File:VNGW_05.png|none|border|left|class=tlt-border|600px]]
−
      
===Finish the VPN gateway configuration===
 
===Finish the VPN gateway configuration===
 
----
 
----
−
After finishing the previous configuration, you can continue with the tags. This section is not mandatory; therefore, we’ll leave it as default and click on '''Review + create''', to check that the network gateway has the parameters as shown below, and then click on the '''Create''' button to finish.
+
After finishing the previous configuration, you can continue with the tags. This section is not mandatory; therefore, we left it as default and clicked on '''Review + create''' to check that the network gateway has the parameters shown below, and then click on the '''Create''' button to finish the configuration.
−
 
      
[[File:VNGW_06.png|none|border|left|class=tlt-border|600px]]
 
[[File:VNGW_06.png|none|border|left|class=tlt-border|600px]]
Line 75: Line 75:  
In the search bar, look for "Local Network Gateways" and click on '''Create'''.
 
In the search bar, look for "Local Network Gateways" and click on '''Create'''.
   −
 
+
[[File:VNGW_07.png|none|border|left|class=tlt-border|600px]]
−
[[File:VNGW_09.png|600px|center]]
        −
Fill in the configuration fields accordingly and add the remote router address space (LAN network) and the FQDN if the router does not have a static public IP address on its WAN interface.
+
'''Fill in the configuration fields accordingly and add the remote router address space (LAN network) and the FQDN if the router does not have a static public IP address on its WAN interface.
 +
'''
    
'''Projects details'''
 
'''Projects details'''
Line 94: Line 94:       −
[[File:VNGW__10.png|600px|center]]
+
[[File:VNGW_08.png|none|border|left|class=tlt-border|600px]]
      −
[[File:VNGW__11.png|600px|center]]
+
[[File:VNGW_09.png|none|border|left|class=tlt-border|600px]]
    
Verify the configuration and click on '''Create''' to finish.
 
Verify the configuration and click on '''Create''' to finish.
      −
[[File:VNGW_12.png|600px|center]]
+
[[File:VNGW_10.png|none|border|left|class=tlt-border|600px]]
    
==Create a connection==
 
==Create a connection==
Line 108: Line 108:  
Search for "Connections" and create a new one:
 
Search for "Connections" and create a new one:
    +
[[File:VNGW_11.png|none|border|left|class=tlt-border|600px]]
   −
[[File:VNGW_13.png|600px|center]]
+
'''Complete the connection settings using the information and images below as reference:'''
−
 
  −
 
  −
Complete the connection settings using the information and images below as reference:
        Line 143: Line 141:       −
[[File:VNGW_14.png|600px|center]]
+
[[File:VNGW_12.png|none|border|left|class=tlt-border|600px]]
      −
[[File:VNGW_15.png|600px|center]]
+
[[File:VNGW_13.png|none|border|left|class=tlt-border|600px]]
      −
[[File:VNGW_16.png|600px|center]]
+
[[File:VNGW_14.png|none|border|left|class=tlt-border|600px]]
      Line 155: Line 153:       −
[[File:VNGW_17.png|600px|center]]
+
Click on '''Review + Create''', then verify the configuration and click on '''Create''' to finish.
−
 
  −
'''Note:''' the tag field can be leaved empty.
  −
 
  −
 
  −
Check that the parameters match and click on '''Create'''.
  −
 
     −
[[File:VNGW_18.png|600px|center]]
+
[[File:VNGW_15.png|none|border|left|class=tlt-border|600px]]
   −
=Teltonika device configuration=
+
=Teltonika Device Configuration=
    
==DDNS configuration==
 
==DDNS configuration==
Line 181: Line 173:       −
[[File:TN_DDNS.png|600px|center]]
+
[[File:TN_DDNS.png|none|border|left|class=tlt-border|600px]]
      Line 187: Line 179:       −
[[File:TN_DDNS02.png|600px|center]]
+
[[File:TN_DDNS02.png|none|border|left|class=tlt-border|600px]]
    
==IPsec configuration==
 
==IPsec configuration==
      −
Locate the following path: WebUI > Services > IPsec ; and a new instance:
+
Locate the following path: '''WebUI > Services > IPsec''' ; and a new instance:
      Line 223: Line 215:       −
[[File:TN_IPSEC01.png|600px|center]]
+
[[File:TN_IPSEC01.png|none|border|left|class=tlt-border|600px]]
      −
[[File:TN_IPsec02.png|600px|center]]
+
[[File:TN_IPsec02.png|none|border|left|class=tlt-border|600px]]
      −
[[File:TN_IPsec03.png|600px|center]]
+
[[File:TN_IPsec03.png|none|border|left|class=tlt-border|600px]]
      −
[[File:TN_IPsec04.png|600px|center]]
+
[[File:TN_IPsec04.png|none|border|left|class=tlt-border|600px]]
    
'''Note:''' in this example, we use DH Group equals to MODP1024 which is the same to Group 2 selected on the Azure platform.
 
'''Note:''' in this example, we use DH Group equals to MODP1024 which is the same to Group 2 selected on the Azure platform.
      −
[[File:TN_IPsec05.png|600px|center]]
+
[[File:TN_IPsec05.png|none|border|left|class=tlt-border|600px]]
    
=Check Site to Site Communication=
 
=Check Site to Site Communication=
 
If you followed the configuration steps, you should see that the Site to Site connection has been successfully established.
 
If you followed the configuration steps, you should see that the Site to Site connection has been successfully established.
   −
 
+
[[File:TN_IPsec06.png|none|border|left|class=tlt-border|600px]]
−
[[File:TN_IPsec06.png|600px|center]]
        Line 249: Line 240:       −
[[File:TN_IPsec07.png|600px|center]]
+
[[File:TN_IPsec07.png|none|border|left|class=tlt-border|600px]]
      Line 255: Line 246:       −
[[File:TN_IPsec08.png|600px|center]]
+
[[File:TN_IPsec08.png|none|border|left|class=tlt-border|600px]]
      Line 261: Line 252:       −
[[File:TN_IPsec09.png|600px|center]]
+
[[File:TN_IPsec09.png|none|border|left|class=tlt-border|600px]]
       
Connect to the VM in Azure, test connectivity to the Router’s LAN interface.
 
Connect to the VM in Azure, test connectivity to the Router’s LAN interface.
   −
 
+
[[File:TN_IPsec10.png|none|border|left|class=tlt-border|600px]]
−
[[File:TN_IPsec10.png|600px|center]]
  −
 
      
=See Also=
 
=See Also=
Retrieved from "https://wiki.teltonika-networks.com/view/Special:MobileDiff/126541...126578"

Navigation menu