156
edits
Changes
Setting up a Site-to-Site IPsec Tunnel between Teltonika Networks and Microsoft Azure (view source)
Revision as of 01:06, 4 June 2024
, 4 June→Check Site to Site Communication
Fill in the configuration fields accordingly and add the remote router address space (LAN network) and the FQDN if the router does not have a static public IP address on its WAN interface.
'''Fill in the configuration fields accordingly and add the remote router address space (LAN network) and the FQDN if the router does not have a static public IP address on its WAN interface.
'''
'''Projects details'''
'''Projects details'''
'''Note:''' You can use different crypto proposals; however, you must ensure that they match on the router.
'''Note:''' You can use different crypto proposals; however, you must ensure that they match on the router.
Click on '''Review + Create''', then verify the configuration and click on '''Create''' to finish.
Click on '''Review + Create''', then verify the configuration and click on '''Create''' to finish.
[[File:VNGW_15.png|none|border|left|class=tlt-border|600px]]
[[File:VNGW_15.png|none|border|left|class=tlt-border|600px]]
=Teltonika device configuration=
=Teltonika Device Configuration=
==DDNS configuration==
==DDNS configuration==
[[File:TN_DDNS.png|600px|center]]
[[File:TN_DDNS.png|none|border|left|class=tlt-border|600px]]
[[File:TN_DDNS02.png|600px|center]]
[[File:TN_DDNS02.png|none|border|left|class=tlt-border|600px]]
==IPsec configuration==
==IPsec configuration==
Locate the following path: WebUI > Services > IPsec ; and a new instance:
Locate the following path: '''WebUI > Services > IPsec''' ; and a new instance:
[[File:TN_IPSEC01.png|600px|center]]
[[File:TN_IPSEC01.png|none|border|left|class=tlt-border|600px]]
[[File:TN_IPsec02.png|600px|center]]
[[File:TN_IPsec02.png|none|border|left|class=tlt-border|600px]]
[[File:TN_IPsec03.png|600px|center]]
[[File:TN_IPsec03.png|none|border|left|class=tlt-border|600px]]
[[File:TN_IPsec04.png|600px|center]]
[[File:TN_IPsec04.png|none|border|left|class=tlt-border|600px]]
'''Note:''' in this example, we use DH Group equals to MODP1024 which is the same to Group 2 selected on the Azure platform.
'''Note:''' in this example, we use DH Group equals to MODP1024 which is the same to Group 2 selected on the Azure platform.
[[File:TN_IPsec05.png|600px|center]]
[[File:TN_IPsec05.png|none|border|left|class=tlt-border|600px]]
=Check Site to Site Communication=
=Check Site to Site Communication=
If you followed the configuration steps, you should see that the Site to Site connection has been successfully established.
If you followed the configuration steps, you should see that the Site to Site connection has been successfully established.
[[File:TN_IPsec06.png|none|border|left|class=tlt-border|600px]]
[[File:TN_IPsec06.png|600px|center]]
[[File:TN_IPsec07.png|600px|center]]
[[File:TN_IPsec07.png|none|border|left|class=tlt-border|600px]]
[[File:TN_IPsec08.png|600px|center]]
[[File:TN_IPsec08.png|none|border|left|class=tlt-border|600px]]
[[File:TN_IPsec09.png|600px|center]]
[[File:TN_IPsec09.png|none|border|left|class=tlt-border|600px]]
Connect to the VM in Azure, test connectivity to the Router’s LAN interface.
Connect to the VM in Azure, test connectivity to the Router’s LAN interface.
[[File:TN_IPsec10.png|none|border|left|class=tlt-border|600px]]
[[File:TN_IPsec10.png|600px|center]]
=See Also=
=See Also=
