Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hey everyone, was wondering if anyone out there has been able to get this to work? Currently have a site to site route based tunnel from Azure to our on-premise Cisco ASA using a VTI interface. The goal is to route all traffic from Azure through the ...
Hello, I'm looking for assistance in routing traffic from our Azure environment through our on-prem ASA5525 and then out to the internet or to other internal hosts. I currently have a VPN tunnel working, so pinging between any hosts on Azure and on-p...
Does anyone have experience with this? A tech from Cisco explained it to me this way
Internet ---> Azure public IP load balancer (LB) ---> LB NAT ---> Cisco ASAv ---> Cisco ASAv NAT ---> web servers x, y, z
Say we have web.service.com and mobile....
Hello, I am looking for advice on updating our DMVPN hub and spoke routers with new encryption and hashing protocols. I'd like to update them to:
#crypto ipsec transform-set TSET2-new esp-aes 256 esp-sha-hmac
My main question is, is there a way t...
Hello, I'm having an issue where outgoing traffic for a specific website at our branch locations is taking our DMVPN route and going through our datacenter (and back out to the internet) rather than going straight to the internet from each branch loc...
Hi, we decided to go without implementing an ASAv at least for web servers. We decided to use Azure's built in Application gateway/load balancer. They also just previewed a stateful firewall (for outbound connections only, I think, at the moment). So...
Interesting, so even by adding a user defined route in azure pointing 0.0.0.0/0 to the vnet vpn gateway still wouldn't be enough to force traffic through the vpn tunnel? that seems to make sense.
Hi, thanks for replying. We haven't tried enabling BGP yet but that is something I'll look into doing right away! Hoping it solves our issues :). I just don't understand why on-prem-bound traffic is captured on the ASA's VTI but internet-bound traffi...
Thanks for the suggestion! Will be trying it out. On another note, would both DMVPN clouds share the same routes? I'm wondering how I could verify that the two clouds are the same in terms of routing.
Ahhh that's an excellent idea too. Configs for our hub and spoke are below. We have the primary tunnel going to our main datacenter, and secondary going to out backup site.
We actually have two primary tunnels headed to our main datacenter (most lo...
