Quantcast
Channel: Azure Networking (DNS, Traffic Manager, VPN, VNET) forum
Viewing all 6513 articles
Browse latest View live
↧

Azure for Saas and Infiniband

September 13, 2013, 4:22 am
$
0
0

Hi,

The answers may be out there but I could not find them in the first few minutes of searching.

1) about SaaS, I am thinking of offering a complex Desktop Application as-a-service (it is not out of the question that it will offer an HTML5 frontend, not yet sure how that meshes with Windows 8 apps and Azure). I don't know if I`ve missed something basic, but it looks like a couple of companies I know of at Amazon AWS went for the following model: you the customer setup an Amazon account, you pay Amazon, if you also pay us our License server we allow your images to run our software. I wanted to have "simplified billing", you pay me, I serve you my image via RDP or whatever, I pay Microsoft. Is there some major stumbling block somewhere in there? Is the scripting interface for Azure, or the provisioning API, mature enough for this to work? I cannot make up my mind if there is a case for Microsoft to attempt to block this business model or not. It is imaginable MS would like only Azure Partners to do such things.

2) Is Infiniband kinda "in there" already and free/cheap and easy, or are there considerable barriers or caveats? I am looking into Azure clusters, but only just have started looking.

Thanks!

 

↧
Search

Cross-Premises Connectivity - VPN Gateway stuck connecting

July 17, 2012, 3:03 pm
$
0
0

Hi

Was running throug a breif proof of concept with one of our network guys and setting up a Cross-Premises Virtual Network, following excatly the setting specified in this how to , but the Gateway appears to be stuck in a connecting state?

Maybe we missing something obvisous, but our public VPN and internal DNS were specified, everything else pretty much the same as the article, any help would be great?

↧
↧

VPN Gateway and VM Persistence

September 13, 2013, 6:39 am
$
0
0

Hi,  

We are considering putting some services in the Azure cloud.

One concern we have is what happens if we need to change or replace our VPN device?

I presume we can do this by just changing the public IP address for the VPN, which would make the VPN switch to the new device.  

Have I understood this correctly?

Thanks & Regards


Steve

↧

Connection between local endpoints of a Point-to-Site Virtual Network

September 15, 2013, 7:44 am
$
0
0
My local endpoints do not see each other. In the old Windows Azure Connect, there was an option called: "Allow connections between endpoints in group". Where is this option in the new Windows Azure Point-to-Site Virtual Network? Or, how can I make my local endpoints be able to communicate with each other?
↧

AD replication with AZURE hosted DC and ADFS

September 6, 2013, 2:17 pm
$
0
0
I have one DC in my local network and one GC  and one in the AZURE cloud, I am hosting ADFS and a DC in azure and I just recently started having replication failures to the GC in the AZURE cloud. I receive RPC failures 1256,1726,1727. Replication of the two machines in my local network is successful.
↧
↧

Unable to ping an endpoint in local network from VPN

September 16, 2013, 7:07 am
$
0
0

I have created an Azure VPN point-to-point network but am unable to successfully ping the desired endpoint that IT has opened for me. Things I have done:

  1. Created the Azure VPN
  2. Given IT the VPN Device Script
  3. IT has configured their end
  4. I am able to ping the first IP Address successfully

I am unable to ping the second IP Address that was given to IT. Is there something else that I or IT should be doing to allow the service deployed to the VPN to access the desired address?

Sean @ CBRE

↧

VPN connected with CiscoASA5505, but still cannot connect machines

September 15, 2013, 4:53 am
$
0
0

Hello all,

It's been a long weekend for me, a dev/architect, not too familiar with networking technology...  I have set up my local CISCO ASA5505 to connect a site-site network with Windows Azure.
After a long period of trial & error, I finally managed to get the gateway show up as connected (and that made me backup my cisco config ASAP :)).
So far, the good news.  I want to connect (ping, remote desktop, http...) from my cloud machine (which is connected in the same virtual network) to my on prem laptop (and the other way around).  I just don't manage to get this working.
I feel it has to do with configuration of NAT or routing, but my knowledge is too limited to get it to work.  I feel I am very close to getting it work, and I hope to get this last piece of help here...

Some information:

  • The following screenshot is the configuration of my virtual network:

  • This is the screenshot of my local network, configured in Azure

  • My virtual machine in Azure has IP address 192.168.10.4
    My local machine at home has IP address 192.168.1.6
  • This is my running Cisco configuration:
Result of the command: "show running-config"

: Saved
:
ASA Version 8.4(4)1 
!
hostname ciscoasa
enable password rDFRVUzyJEqRF6oV encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.1.1 255.255.255.0 
!
interface Vlan2
 nameif outside
 security-level 0
 ip address dhcp setroute 
!
ftp mode passive
clock timezone GMT 0
object network obj_any
 subnet 0.0.0.0 0.0.0.0
object network Azure_Gateway
 range 192.168.12.4 192.168.12.6
 description Gateway settings on Azure network
object network Azure_VMs
 range 192.168.10.4 192.168.11.254
 description Range of Azure Virtual Machines
object network LocalMachines
 range 192.168.30.0 192.168.30.255
 description From Local Network
object network Azure_Begin
 subnet 192.168.0.0 255.255.240.0
 description Errors: no matching crypto map entry for remote proxy 192.168.0.0/255.255.240.0/0/0 local proxy 192.168.30.0/255.255.255.0/0/ on interface outside
object-group network RP_Azure
 description group that defines the IP Addresses used on the Azure side of things
 network-object object Azure_Gateway
 network-object object Azure_VMs
 network-object object Azure_Begin
object-group network RP_Local
 description group that defines the IP Addresses used on your local network
 network-object object LocalMachines
access-list outside_cryptomap extended permit ip object-group RP_Local object-group RP_Azure 
access-list RP_AccessList extended permit ip object-group RP_Local object-group RP_Azure 
access-list outside_cryptomap_1 extended permit ip object-group RP_Local object-group RP_Azure 
access-list outside_access_in extended permit icmp object-group RP_Azure object-group RP_Local 
access-list outside_access_in extended permit icmp object-group RP_Local object-group RP_Azure 
access-list outside_access_in extended permit udp object-group RP_Azure object-group RP_Local 
access-list outside_access_in extended permit udp object-group RP_Local object-group RP_Azure 
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
nat (inside,outside) source static RP_Local RP_Local destination static RP_Azure RP_Azure
nat (inside,any) source static RP_Local RP_Local destination static RP_Azure RP_Azure
!
object network obj_any
 nat (inside,outside) dynamic interface
!
nat (inside,outside) after-auto source dynamic any interface
access-group outside_access_in in interface outside
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
sysopt connection tcpmss 1350
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac 
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac 
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac 
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac 
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac 
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac 
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac 
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac 
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac 
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac 
crypto ipsec ikev1 transform-set RP_AzureTransforms esp-aes-256 esp-sha-hmac 
crypto ipsec ikev2 ipsec-proposal DES
 protocol esp encryption des
 protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal 3DES
 protocol esp encryption 3des
 protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES
 protocol esp encryption aes
 protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES192
 protocol esp encryption aes-192
 protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES256
 protocol esp encryption aes-256
 protocol esp integrity sha-1 md5
crypto ipsec security-association lifetime seconds 3600
crypto ipsec security-association lifetime kilobytes 102400000
crypto map outside_map1 2 match address outside_cryptomap_1
crypto map outside_map1 2 set peer 137.117.176.125 
crypto map outside_map1 2 set ikev1 transform-set RP_AzureTransforms
crypto map RP_IPSecCryptoMap 1 match address RP_AccessList
crypto map RP_IPSecCryptoMap 1 set peer 137.117.176.125 
crypto map RP_IPSecCryptoMap 1 set ikev1 transform-set RP_AzureTransforms
crypto map RP_IPSecCryptoMap interface outside
crypto ca trustpoint _SmartCallHome_ServerCA
 crl configure
crypto ca trustpoint ASA5505_Manganica
 keypair ASA5505_Manganica
 crl configure
crypto ca certificate chain ASA5505_Manganica
 certificate ca d83954e19c7168a044202ccb4bc4add1
    30820308 308201f4 a0030201 020210d8 3954e19c 7168a044 202ccb4b c4add130 
    0906052b 0e03021d 0500301b 31193017 06035504 03131056 504e4d61 6e67616e 
    69636152 6f6f7430 1e170d31 33303931 34323134 3631385a 170d3339 31323331 
    32333539 35395a30 1b311930 17060355 04031310 56504e4d 616e6761 6e696361 
    526f6f74 30820122 300d0609 2a864886 f70d0101 01050003 82010f00 3082010a 
    02820101 00a7632a 90cf65b9 9beb3bc2 3cc9dbab bede9ece 32882c45 493c511f 
    a02d8d92 6059e6c5 dc27724e 47cf0484 8d6aeb34 1c47a2d6 58d2bc47 f38bba5c 
    2bd0588d 27ed1c8f f780458b 30dae086 b2f4ae2c c3a2adb8 d0caef99 0b663115 
    f1f18531 d81cf6ac 318c56ac e191d691 72d9db59 7aeed4e5 409f5504 21c20a17 
    b4f777c8 62bd4980 c49581cf ae4ff547 b5bf475d ba1a7ad7 c89fc920 2dd85098 
    b3cb8e79 d26b5ef0 b1b2e31c 6d3a5567 fbed2427 ba7d620f 9e3a70fd 56bd7e1f 
    946842c8 694c43b0 c412523f 44e62bed a36741c5 a034deab 5463f0b9 53844bfa 
    96ec473e c3cb9bcf f49c3fd5 7c6b04b5 ee865d6f cf136e22 4056596b 9f93598e 
    1551f39f 3f020301 0001a350 304e304c 0603551d 01044530 438010c6 b0fc1b4e 
    4ede0317 af94e831 c8354aa1 1d301b31 19301706 03550403 13105650 4e4d616e 
    67616e69 6361526f 6f748210 d83954e1 9c7168a0 44202ccb 4bc4add1 30090605 
    2b0e0302 1d050003 82010100 711b3a59 5dac3b75 66ba0f94 589fe00c 3ea1003d 
    f3f6cbd8 e1f3bcd7 1dd03773 306c3f72 afa12a83 e614e20b f1187e05 f0390e39 
    41b75487 d04faef8 66c1716c c15c641f 4329baa2 c4b4e223 ca99276c 931ff18e 
    7353755c 2e00bd6d 622bcd30 58122c97 c683e3e7 65d70dc2 4ea70235 adc0803f 
    c7f3654d bc7a0a0c f725eb42 bdb958d7 7fc136a2 2364c55b 79668016 5cd8eec7 
    99f1ba44 9d3f7dd1 9053ae58 89e0d61a 84640665 ee2b415f 4e94b6b0 62385bd0 
    18d2e2bd ce35ca4b e829ceb7 37cf0fba 99f3486e 75ae9ae2 4dc2b1a4 e25add8f 
    b3b2e766 c2b9de4c 4d407d21 58c90179 6ecde9b9 46c80892 9fae7be3 b21def8a 
    13904839 803e32d1 f5b60e99
  quit
crypto ikev2 policy 1
 encryption aes-256
 integrity sha
 group 5 2
 prf sha
 lifetime seconds 86400
crypto ikev2 policy 10
 encryption aes-192
 integrity sha
 group 5 2
 prf sha
 lifetime seconds 86400
crypto ikev2 policy 20
 encryption aes
 integrity sha
 group 5 2
 prf sha
 lifetime seconds 86400
crypto ikev2 policy 30
 encryption 3des
 integrity sha
 group 5 2
 prf sha
 lifetime seconds 86400
crypto ikev2 policy 40
 encryption des
 integrity sha
 group 5 2
 prf sha
 lifetime seconds 86400
crypto ikev2 enable inside
crypto ikev2 enable outside
crypto ikev1 enable inside
crypto ikev1 enable outside
crypto ikev1 policy 1
 authentication pre-share
 encryption aes-256
 hash sha
 group 2
 lifetime 28800
crypto ikev1 policy 10
 authentication crack
 encryption aes-256
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 20
 authentication rsa-sig
 encryption aes-256
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 30
 authentication pre-share
 encryption aes-256
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 40
 authentication crack
 encryption aes-192
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 50
 authentication rsa-sig
 encryption aes-192
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 60
 authentication pre-share
 encryption aes-192
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 70
 authentication crack
 encryption aes
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 80
 authentication rsa-sig
 encryption aes
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 90
 authentication pre-share
 encryption aes
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 100
 authentication crack
 encryption 3des
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 110
 authentication rsa-sig
 encryption 3des
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 120
 authentication pre-share
 encryption 3des
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 130
 authentication crack
 encryption des
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 140
 authentication rsa-sig
 encryption des
 hash sha
 group 2
 lifetime 86400
crypto ikev1 policy 150
 authentication pre-share
 encryption des
 hash sha
 group 2
 lifetime 86400
telnet timeout 5
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0

dhcpd auto_config outside
!
dhcpd address 192.168.1.5-192.168.1.36 inside
dhcpd auto_config outside interface inside
dhcpd enable inside
!
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
group-policy DfltGrpPolicy attributes
 vpn-tunnel-protocol ikev1 l2tp-ipsec ssl-clientless
tunnel-group 137.117.176.125 type ipsec-l2l
tunnel-group 137.117.176.125 ipsec-attributes
 ikev1 pre-shared-key *****
 isakmp keepalive threshold 300 retry 2
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map 
  inspect ftp 
  inspect h323 h225 
  inspect h323 ras 
  inspect rsh 
  inspect rtsp 
  inspect esmtp 
  inspect sqlnet 
  inspect skinny  
  inspect sunrpc 
  inspect xdmcp 
  inspect sip  
  inspect netbios 
  inspect tftp 
  inspect ip-options 
!
service-policy global_policy global
prompt hostname context 
call-home reporting anonymous
Cryptochecksum:eafa3fc40bb54a4a556f1028585a5a01
: end

Any help is truly highly appreciated !

Sam Vanhoutte - CTO Codit - VTS-P BizTalk - Windows Azure Integration: www.integrationcloud.eu

↧

Virtural Network Shows Disconnected Status After Rebooting On Premises Server

September 16, 2013, 11:15 am
$
0
0

I have Designed Virtual Network with cross premises connectivity. When I restart my on premises dns server the windows azure dashboard shows disconnected status.

My VN gateway is created using dynamic option.

↧
Search

How to reconnect clients to Windows Azure Virtual Network automatically?

September 14, 2013, 11:13 am
$
0
0

I have a Point-to-Site Virtual Network in Windows Azure and client computers configured using the package downloaded from the management portal, running Windows 8.1. The connection can be established only in a custom dialog. When I restart the computers, I always have to reconnect to the VPN manually.

How can I configure my client computers to connect automatically to the Windows Azure Virtual Network after restart?

↧
↧

Need help choosing address space

September 17, 2013, 4:01 am
$
0
0

Hi,

I'm planning to deploy some backend and frontend virtual machines in Windows Azure, these are going to be domain members and I'm planning for a Virtual Network and site to site VPN. My question is regarding address spaces.

Customer already uses several networks internally and I'm not sure how to create two subnets in Azure without overlapping the internal networks. This is what I'm planning and what customer already has:

Is this correct? It seems it doesn't because the address space in Azure overlaps with one of the internal networks. The subnet I create, on the other hand, doesn't.

Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!

↧

Network Gateway - Edge Protection

September 17, 2013, 6:56 am
$
0
0

For a large enterprise to move into Azure our security teams will be comparing security devices/services that have been architected for internal use to protect internal solutions, with equivalent services from Azure.

As such what is Azures equivalent or method to deliver the same capabilities (I am aware that they may be split between different areas, i.e. the two types of VPN within Azure) as VMWare vSheild Edge?

Below is the definition of vShield Edge, I would be very interested in understanding anything about how Azure provides anything that is similar to this product or the capabilities that it provides?

"VMware vShield Edge
vShield Edge is a network gateway solution that protects the
edges of the virtual datacenter with DCHP, network address
translation, firewalling, load balancing, site-to-site VPN, port group
isolation and other capabilities that help organizations maintain
proper segmentation between different organizational units."

Thanks

Tom Hickling

↧

Downloading Point-to-Site client more than once has isuses

September 17, 2013, 11:01 am
$
0
0

I have downloaded the VPN client for the Virtual Network I've built and it works great.  Some of the tablets we're deploying are x86 and the client is installing and working as expected.  When I tested it I downloaded and installed on my system, x64, and it worked fine as well.  Now I need to download the x64 copy again and when I click on it I get the status bar for a moment and then it says it Downloaded successfully and I can click OK.  Only I am never prompted to actually download anything.

I have now tried on 3 different systems running IE9, IE10, Chrome and Firefox with no luck.  I haven't tried Safari on OS X yet but I doubt we'll see a lot of difference.  Is there another place I need to go to download the client on subsequent attempts.  I need help fairly quickly as we're running up against a time barrier and I desperately need the 64 bit client.

Thank you in advance for your advice.

↧

Is it possible to buiding a VPN server by using Windows Azure?

September 19, 2013, 9:44 am
$
0
0

Is it possible to buiding a VPN server by using Windows Azure?

the main problem is I don't know how to open IP Protocol Port 47 (GRE), if Windows Azure support IP Protocol or it is support TCP/IP protocol only.

Thanks! 

Zhongyan

↧
↧

No connectivity between some servers across Site-to-Site VPN

September 18, 2013, 7:17 am
$
0
0

We have configured a Site-to-Site VPN connection between our on-premises location and Windows Azure, and while connectivity appears to work for the most part, we are finding that our on-premises member servers running Windows Server 2008 R2 cannot communicate with our Azure VMs running Windows Server 2012.

Our network subnets are as follows:

  • Local Network (on-premises): 192.168.1.0/24
  • Virtual Network (in Azure): 192.168.32.0/24

The VMs in Azure running Server 2012 can communicate with our on-premises servers running Server 2003 and our workstations running Windows 7. Plus, our two local domain controllers (running Server 2003 and 2008 R2) cancommunicate with the domain controller we've set up in Azure (running Server 2012) and vice-versa.

Our workstations and on-premises servers are all in the same subnet, and all the servers are members of the same domain.  I have tried disabling the built-in Windows Firewall on a pair of the problematic servers (one in each subnet), but that doesn't make a difference.

Is there something else that would prevent the 2008 R2-and-later servers from communicating with each other across the subnets?  Any help would be greatly appreciated.


↧

Adding a Windows Azure Website to a local domain?

December 14, 2012, 3:23 am
$
0
0

Hello Community,

I'm currently developing a solution for a client and we're looking into deploying their application in a Azure Website instance.  That is, a ASP.NET WebAPI application that will deploy to:

http://*applicationame*.azurewebsites.net

I'm looking to secure this application with Windows Authentication, and wanting to know how to add this Website instance so that it is a part of the client's Windows Domain.  Is this possible?

It appears this is possible with Cloud Services as outlined here:

http://blogs.msdn.com/b/windows_azure_connect_team_blog/archive/2010/12/10/domain-joining-windows-azure-roles.aspx

Is this possible with Azure Websites?

Thank you,

Michael


↧
Search

Azure Storage internal IP

November 1, 2013, 4:31 am
$
0
0

Hi,

I have a Virtual Machine in VPN. There is no internet connection on the Virtual Machine, it can be accessed only through internal IP. On the Virtual Machine I am running a WCF which connects to the Azure Tables 'sample.table.core.windows.net'

Since there is no internet on the Virtual Machine, the WCF is unable to connect to 'sample.table.core.windows.net'

Can I access Azure Table 'sample.table.core.windows.net' with a internal IP.

Thanks,

Sujit Karpe

↧

How to make communication between two or three Virtual Network in same subscription in Windows Azure ?

November 11, 2013, 8:55 pm
$
0
0

I have created three Virtual Network in my subscription. Now i want to make communication between these Virtual Network interconnected. How to do configuration ? 

Any help greatly appreciated. 

↧
↧

Geographic zone for IP on Windows Azure virtual machine

November 7, 2013, 3:20 am
$
0
0

I created a VM on my Windows Azure space, choosing the location of North Europe.

If I look up my IP, it shows up coming from the US. Cannot we specify from which country we want the connections to come from?

Is this internet IP static or dynamic?

Thank you

↧

[MSFT] Azure P2S (Point-to-Site) VPN issue

November 11, 2013, 12:19 pm
$
0
0

(Posting on the forum to alert the issue and impact)

An issue on Azure P2S (Point-to-Site) VPN was found last week that could prevent customers from using Azure P2S VPNs.Note that P2S is a CTP feature and should not be used for production workloads.

  • Impact:
    • For the affected P2S VPN gateways (DynamicRouting Gateways), customers will not be able to connect their VPN clients to their Azure VPN gateways
    • The S2S VPN tunnel on the affected gateway is NOT impacted – so S2S VPN tunnels for DynamicRouting gateways will continue to work
    • (StaticRouting gateways are NOT affected by this issue)
  • Mitigation:
    • Customers with affected P2S VPN gateways should delete and recreate their VPN gateways, then download/install the VPN client installation packages again. This should mitigate the issue.
    • The potential side effect is that their VPN gateway VIPs (public IP addresses) may change. If they also have S2S VPN tunnels on the same gateways, they may need to update their VPN configuration to connect to the new VIPs.
  • Fix:
    • The product team is working on a hotfix to this issue. We will roll this out as soon as possible.

Apologize for the inconvenience. Please contact me if you have any questions.

Thanks,

Yushun Wang [MSFT]


↧

Packet loss when pinging one VM from another

August 16, 2012, 5:52 pm
$
0
0

I've setup a virtual network with 2 virtual machines: one for running sql server and other for remote desktop sessions. All items deployed on west coast servers if that matters.

For the past 3 days I am noticing that the remote desktop sessions seem to "freeze" for a few seconds every few minutes or so. For example while doing some data entry the screen freezes for a few seconds and mouse/keyboard input seem to do nothing. Then it returns to normal. I tried other ISPs but got same issue.

I am also getting complains from the application that uses SQL server, frequent error messages telling me that the SQL server connection was lost. To diagnose this particular issue I ran "ping -t 192.168.10.5" command and found out that 1-2 packets time out every minute or so:

Ping statistics for 192.168.10.5:
    Packets: Sent = 1515, Received = 1490, Lost = 25 (1% loss),

I cannot ping the RDP/SQL server from the outside but I am sure I would get similar results. 1% packet loss looks insignificant but it isn't, my application is choking every minute or two and terminal sessions are terrible experience.

Can anyone tell my why this is happening and how to fix this issue.

↧
Viewing all 6513 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>