Microsoft Azure

[Larry Kuntz]

Our company is seeking to setup two sites to connect to Microsoft's Azure cloud.  Microsoft has not had and for that matter still does not have the any documentation on this done.  They had some information and now this has ben deleted what they did have and no redirects or alternative.  <A little venting since I have be chasing this since July.>

I am seeking to find someone on here that has a mult-point site connection using routers since I understand ASA's cannot be used with mutliple site connections and find out if they would be willing to share a templete with me since I cannot find any examples, requirements or anything that gives some instruction how to do it.  Our Azure expert doesn't know anything about this and just points us to the github.  A real winner to begin with and now has nothing.

Thank you in advance for your help.  I would greatly apprecate it if you would not point me to the the link but rather share some dialog with me and some templates. 

Larry

P.S.  Cisco doesn't have anything either because it would be competing with their cloud.

[Boris Uskov]

Hello, Larry.

I'm not sure, that MS Azure has deleted the opportunity to build simple Site-to-Site tunnels to the cloud. Please, check the following link for configuration examples:

https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-site-to-site-create/

And:

https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-about-vpn-devices/

If you are sure, that those configuration examples are not suitable for you, and Azure enforces you to use multi-point site VPNs connections, which can be configured only on Routers (not ASAs), I believe, you'll have to configure routers as DMVPN Spokes.

More information about DMVPN type of VPNs can be found there:

http://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/29240-dcmvpn.html

https://supportforums.cisco.com/document/124431/dmvpn-configuration-example

[Larry Kuntz]

Boris,

Thank you for your information.  I am curious if you have done this and if so do you have a templete that you would be willing to share?

Thanks!

[Boris Uskov]

Hello, Larry.

The person, who is responsible for Microsoft services in our company just said: "Hey, Boris, configure, please, the VPN for Azure for me." And sent me the templete for a very simple IPsec Site-to-Site configuration for ASA (template in attach). The templete was for ASA, but, as soon, as we have Cisco Router in out company, I changed the configuration to be suitable for router. 

It was in December 2014. The VPN works till now.

But, in my case, there were just a simple site-to-site VPN, not multi-point VPN.