question

JaimeStuardo-5606 avatar image
0 Votes"
JaimeStuardo-5606 asked GitaraniSharmaMSFT-4262 commented

Does Azure VPN allow to route all traffic now?

Hello,

I have created a VPN in Azure so that I will keep my IP private and can connect to web sites in USA that do not allow connections from other countries.

I ran "route print" command and I saw that traffics to virtual machines in Azure will be routed through the VPN interface.

I have read a post of 2017 and I have read that was not possible (at that time) to route all traffic. I am wondering if, considering all the time passed, Azure VPN can route all traffic now.

Thanks
Jaime

azure-vpn-gateway
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

GitaraniSharmaMSFT-4262 avatar image
0 Votes"
GitaraniSharmaMSFT-4262 answered GitaraniSharmaMSFT-4262 commented

Hello anonymous usertuardo-5606 ,

Apologies for the delay in response.

You can direct all traffic to the VPN tunnel by advertising 0.0.0.0/1 and 128.0.0.0/1 as custom routes to the VPN clients.
Reference : https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes#forced-tunneling
Custom routes are supported and that forces all traffic from the client to Azure. However, I want to emphasize that the VPN client will loose all connectivity to the Internet (even through the local internet breakout as all traffic will be forced to Azure).

Kindly let us know if the above helps or you need further assistance on this issue.


Please "Accept the answer" below if the information helped you. This will help us and others in the community as well.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello,

I have a question regarding this sentence:

the VPN client will loose all connectivity to the Internet

As I told, I need to browse web sites in USA through the gateway. By doing the tunneling as explained in that link, will I be able to do it?

To make this clearer. Currently I have:

My LAN ---> My ISP ---> All web sites around the world but a few in USA that only allow connections from USA

What I need is:

My LAN ---> My ISP ---> Azure network ---> All web sites around the world

Thanks
Jaime




0 Votes 0 ·

Hello anonymous usertuardo-5606 ,

You will be able to browse the Internet from the Azure VM which you connect to via P2S VPN, however the P2S client will lose Internet connectivity. So you should be able to browse web sites in USA from the connected Azure VM. However, if your requirement is to browse the web sites from the local machine where P2S client is installed with forced tunneling, it is not possible.

Kindly let us know if the above helps or you need further assistance on this issue.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

0 Votes 0 ·

thanks for your answer... and you are right... I needed to browse Internet using my PC. Azure VM has Window Server, and you know what happens when Windows Server tries to browse Internet. A lot of exceptions should be added in order to browse correctly, and since that VM is used by my customers, I don't want to use it to accomplish this.

Regards
Jaime

0 Votes 0 ·
Show more comments