question

DineshKK-2956 avatar image
0 Votes"
DineshKK-2956 asked AbdouElmoslemany-6870 commented

Azure P2S VPN Gateway not connecting from Cairo, Egypt

Azure VPN Gateway not connecting when employed travelled from Canada to Cairo, Egypt. Employee has the office laptop and she was able to connect during the transit time in Germany. It stopped working when she tried connecting from Cairo, Egypt. Please whitelist the IPs if required to be able to connect VPN Gateway. VPN Client Log are shown below


AzureVPNClient.log:

[‎2020‎-‎12‎-‎23‎ ‎9‎:‎38‎:‎58‎ ‎PM] PId:[00002624] TId:[00011724] [ApplicationX] [] [Verbose] Application Initialized
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎04‎ ‎PM] PId:[00002624] TId:[00011724] [ApplicationX] [] [Verbose] Dialing VPN connection ppi-vpn-vnet
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎05‎ ‎PM] PId:[00002624] TId:[00011724] [ApplicationX] [] [Verbose] Success Received AAD Credential Token. User: [redacted]
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎05‎ ‎PM] PId:[00002624] TId:[00011724] [ApplicationX] [] [Verbose] Received AAD Credential Token (Background). User:[redacted]
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎33‎ ‎PM] PId:[00002624] TId:[00011724] [ApplicationX] [] [Verbose] Refresh Timer Stopped
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎35‎ ‎PM] PId:[00002624] TId:[00011724] [ApplicationX] [] [Error] Dialing VPN connection ppi-vpn-vnet, Status = A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.


[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎05‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Connection Logs Initialized
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎07‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Information] Found password in Vault
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎07‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Attempting to connect to VPN server @ azuregateway-9f1d0066-8d0f-4609-b4e9-c49c209852fe-e640ee78ab6c.vpn.azure.com.
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Information] Socket connected, NoDelay: 1
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Queuing HardResetClientV2
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Reading Packet Length
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Sending Packet ID: 1 MsgPktId 0
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00009700] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Expected Packet Length: 66
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00009700] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Connection State : ProtocolConnecting, PrimarySession : 0, Session1 State : ClientResetSent, Session2 State : SDisconnected
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00009700] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Queuing ACK for MsgPacketId [0]
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Moving ACK to OutQueue
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00009700] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Received PacketId [1], OpCode: 8 PayloadLength: 0, MsgPacketId: 0, TimeStamp: 1608777535, SessionId: 0xb7ed8615
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Sending Packet ID: 2 MsgPktId -1
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00009700] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Packet on Wire, Length: 232
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00009700] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Reading Packet Length
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎08‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Sending Packet ID: 3 MsgPktId 1
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎34‎ ‎PM] PId:[00002624] TId:[00008364] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Error] Failed to establish OpenVPN connection: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
[‎2020‎-‎12‎-‎23‎ ‎9‎:‎39‎:‎35‎ ‎PM] PId:[00002624] TId:[00013888] [ppi-vpn-vnet] [{b6e24590-e7d7-4a65-aba8-ff7586910f56}] [Verbose] Disconnecting...

azure-vpn-gateway
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I have the same issue, and also we are based in Egypt.

what is known, that IPSEC is blocked here for all ISPs and for all Types of connections. but this the first time I know that openVPN is also blocked.


dose any one have workaround or anther solution to make P2S connection to azure even if we used 3rd party solution

0 Votes 0 ·
AndreasBaumgarten avatar image
0 Votes"
AndreasBaumgarten answered

How is the client device connected to the internet?
Any chance to try a different provider, for instance via hot spot of the mobile phone?


(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

suvasara-MSFT avatar image
0 Votes"
suvasara-MSFT answered

@DineshKK-2956, Try Performing the Gateway reset operation and give a try to reconnect your client machines.
Also verify that you have the correct Root and Client Certificate installed on both the VPN Gateway as well as your Client Machines.

Below are documentation links for your reference

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-resource-manager-portal
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site#clientcert




Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AhmadHalabi-0997 avatar image
0 Votes"
AhmadHalabi-0997 answered AhmadHalabi-0997 published

I'm having the same issue with 2 users who are currently located in Cairo.
Please let me know if you found any solution.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

suvasara-MSFT avatar image
0 Votes"
suvasara-MSFT answered

@AhmadHalabi-0997, Are you still facing this issue? If so, please drop us a mail to azcommunity@microsoft.com for deeper investigation.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MohamedZaky-6269 avatar image
0 Votes"
MohamedZaky-6269 answered

I have the same issue, can not connect using ADSL or 4G, can only connect using leased Line from Egypt.
any solution ?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.