Quantcast
Channel: Azure Networking (DNS, Traffic Manager, VPN, VNET) forum
Viewing all 6513 articles
Browse latest View live

Azure Site Recovery

$
0
0
How can i replicate my on premise server to azure.

Swap Reserved IP Address from one virtual machine to another

$
0
0
Hi, I have 2 different cloud service in my subscription and I need to swap the reserved IP address from one to the other.
I'm trying to use the cmdlet to set the vip:Set-AzureReservedIPAssociation -ReservedIPName "RESERVEDIP" -ServiceName "XXXX"
I have this error: Set-AzureReservedIPAssociation : BadRequest: The vip for deployment XXXX in service XXXX specified for
reserved ip "RESERVEDIP"  is not set. Ensure that the deployment is  Running.
I have checked that the destination deployment is running
Before that I tried to remove the association with the cmdlet Remove-AzureReservedIPAssociation, but I have the same issue
Is it possible for you, to set the right vip if I tell you any detail of the subscription?

Virtual Network down since September16, 2016

$
0
0

My VPN Site-To-Site VPN connection is still down and unable to connect. Is the problem still exist with Azure being down.

error config rdns

$
0
0
Good morning , I used https://azure.microsoft.com/en-in/blog/announcing-reverse-dns-for-azure-cloud-services/ manual and could not make it work , you guys could help me
Good morning , I used https://azure.microsoft.com/en-in/blog/announcing-reverse-dns-for-azure-cloud-services/ manual and could not make it work , you guys could help me

Precautions to take while designing Virtual Network

$
0
0

Hello Team,

I am planning to deploy site to site VPN. I wanted to know what precautions I need to take while designing Virtual Network so it doesn't overlaps with the On-Premise network likewise are there any other precautions. Do I need to make any changes on the on-premise network. 


Mohammed Kasim

Palo Alto Fresh Install "Entry Reason: System startup error.

$
0
0

I have attempted to setup a Palo Alto VM-300 Bundle 1 several times with the same results each time. After the procurement process is over it says everything is complete yet when I ssh into the device via its public IP I get dumped to the "Welcome to the Maintenance Recovery Tool". I took all the defaults during the build out. I don't understand what I am messing up so early in the build process. I am using these instructions, there is not allot to mess up.
https://www.paloaltonetworks.com/documentation/71/virtualization/virtualization/set-up-the-vm-series-firewall-in-azure/deploy-the-vm-series-firewall-in-azure-solution-template

Any pointers would be greatly appreciated.

AzureRmVirtualNetworkGatewayConnection for the ExpressRoute provisioningState": "Failed".

$
0
0

Hi,

We have an ExpressRoute set up for the our subscription.

I have successfully provisioned Virtual Network, Gateway and Connection in the West Europe Region.  The connection has been successfully established. 

I have did the same for the Northern Europe, but later has deleted the VirtualNetworkGatewayConnection, VirtualNetworkGateway, PublicIpAddress and  Virtual Network to change their names.

When I'm trying to re-provision  - all is fine, except the VirtualNetworkGatewayConnection. 

It is always failing, showing in the debug:

Body:
{
  "name": "ERC-NE-001",
  "id": "/subscriptions/GUID/resourceGroups/RG-NE-001/providers/Microsoft.Network/connections/ERC-NE-001",
  "etag": "W/\"GUID\"",
  "type": "Microsoft.Network/connections",
  "location": "northeurope",
  "properties": {
    "provisioningState": "Failed",
    "resourceGuid": "GUID",
    "virtualNetworkGateway1": {
      "id": "/subscriptions/GUID/resourceGroups/RG-NE-001/providers/Microsoft.Network/virtualNetworkGateways/GW-NE-001"
    },
    "connectionType": "ExpressRoute",
    "routingWeight": 0,
    "ingressBytesTransferred": 0,
    "egressBytesTransferred": 0,
    "peer": {
      "id": "/subscriptions/GUID/resourceGroups/RG-NE-001/providers/Microsoft.Network/expressRouteCircuits/XXXXXExpressRoute"
    }
  }
}

What could be the cause and how can I get some more output to try to sort this out?

Thanks!


VPN service

$
0
0
Can I use my own VPN service provider?

Lost Traffic Manager Items After Moving Items Between the RG's.

$
0
0

Hello,

i just try to move resource to another Resource Group via the portal. All item moved seems flawlessly except traffic manager named with "nds". Now my trafic manager item is lost.

How can i recover it?

How to mask local router IP with a static IP from a VPN?

$
0
0

At work we use a whitelist to allow access to development servers etc. I want to be able to connect to these servers using my own VPN with a static IP address so that I can work from different locations without having to <g class="gr_ gr_67 gr-alert gr_spell gr_run_anim ContextualSpelling ins-del" data-gr-id="67" id="67">white list</g> multiple IP addresses. Is this possible with VPN? I have so far done the following: 

  • Created a Virtual Private Network (Classic)
  • A Gateway with Dynamic Routing and set it up for Point to Site
  • Generated required certificates and installed on VPN and local machine

and followed these two articles; however, when I visit www.whatismyip.org it still displays my router's original IP address

https://azure.microsoft.com/en-us/documentation/articles/vpn-gateway-point-to-site-create/

https://bitwizards.com/Thought-Leadership/Blog/2015/September-2015/All-About-Azure-Virtual-Networks-Point-To-Site


Custom Endpoint Monitor Settings

$
0
0
Hello,

We had a situation where one of our service plan instances was failing to load our website, but was still returning a 200 response, therefore the endpoint monitor still saw the website as up.  This situation caused us to lose a significant amount of traffic.

We would like to know if its possible to have the endpoint monitor check a specific path, but with a GET request, seeking an item on the web page itself?  

Only checking for a 200 response is problematic. 

Multiple IP-Sec connections for multiple Azure Subnets

$
0
0

Hello


I am planning to setup Site To Site VPN or Express Route for my Azure Subscription. In Azure I have VNet with IP Range "10.243.248.0/23" and two subnets Subnet1 "10.243.248.0/24" , Subnet2 "10.243.249.128/25" and Gateway Subnet"10.243.249.0/29". My requirement is that Subnet1 and Subnet2 shouldn't be talking to each other. Further, I would like to know this two subnets will use two seperate IPSec Routing or will they use single IPSec Routing. If they will use single IPSec Routing, then what is the way to use two different IPSec routing for two different subnet. I am using Subnet 1 for Client Communication and Subnet 2 Backup. Further, is there anyway to create multiple Gatewat Subnet for single Vnet

How HPC Azure compute nodes talk to server on-premise

$
0
0

What has been done:

Hybrid HPC cluster, on azure classic portal, vnet with P2S(point to site) vpn gateway has been setup . Certificate and vpn client application has been installed on headnode(on premise). Azure node template created with network defined to use vnet on the cloud. Azure compute node can be started and brought online after p2s vpn connection established. From on-premise headnode I can ping Azure compute node's ip because of vpn connection. We have a importance service on headnode on based tcp/ip connection that compute nodes need to communicate headnode

Noticed issue

1. From azure compute node, I can't not ping headnode's ip.

2. From azure compute node, I can't not ping any servers on the internet like google.com.

Question:

1. Why azure compute node doesn't have internet connection? that's the way it is or something I missed.

2. With P2S vpn connection setup how come I cannot ping on-premise headnode?

3. What's best practice for azure compute nodes talk to an server on-premise?

Your reply is appreciated.

Create and associate IP address reserved

$
0
0

Hi, You could give me a tutorial on how to create IP addresses reserved, associate them to virtual machines, desassociate of them and remove them? In the Microsoft Azure page, information that exists it's very confusing. Thanks.

How to "deploy" a Ubuntu virtual machine into a virtual network

$
0
0

I've been struggling for days now to get a linux server setup with a specific application on Azure.  After spending some phone support time with Microsoft I learned that I had to use the Classic portal to set up the older version of Ubuntu required for my application, and now that I have the OS installed, configured, and then the specific application, which required significant time to get going, I have now discovered that there is an application module that is hard-coded to a specific private IP address. I looked around Azure's settings for the VM to see how to assign a static IP address in Azure to the Ubuntu VM but was alerted that the VM needed to be "deployed" in a virtual network before I could assign a static address.

SO...I found the virtual networking (VN) resource and created the subnet I need, but despite that VN being within the resource group with the VM (along with a cloud resource), I'm still seeing the same error message within the VM IP address setting saying I need to deploy the VM in the VN.  I am finding no directions so far on how to do that.  Help!


Azure VPN connection using DH Group 5 for Phase 1

$
0
0
Need to create a VPN connection from Azure to an on premise VPN device. On premise security policy mandates the DH Group 5 or 14 must be used for Phase 1. DH Group 2 has been deemed to unsecure. Please advise.

Traffic Manager and Public IPs

$
0
0

I'm attempting to setup a DR Office 365 Identity solution in Azure.  Here is my setup:

On-premise:

1 AADConnect Server

2 ADFS Servers

Reverse Proxy handled by virtual BigIP

In Azure:

Site-to-site VPN has been configured

1 DC has been built

1 WAP server (in DMZ subnet built)

1 ADFS server built

I'm attempting to setup a traffic manager profile that will allow me to load balance (based on priority) all connections made to adfs.domain.com.  I want to have all connections going to on-premise first and utilize azure as DR only.

When I attempt to setup the traffic manager profile to use an 'Azure Endpoint' of 'Public IP', all public IPs are greyed out.

I want to add endpoints for Azure Endpoint/public IP and External Endpoint (that points to the adfs.domain.com thats on the reverse proxy solution.

Please assist.

Network Security Group not blocking DNS resolution

$
0
0

I am trying to isolate a VM for testing purposes by associating the NIC for the VM with a NSG and putting a block all in place for outbound traffic.  Once I verify the rule is in place, I login via RDP and check to make sure that I cannot in fact reach any external resources.  It would seem that I am mostly blocked, however, I can still run an nslookup and resolve IPs.  If I have a NIC associated with an NSG and have that set to block * to *, shouldn't DNS resolution be blocked as well?



Thanks!

Application Gateway gives 404 error if plus sign in URL

$
0
0

Is there anyway to get Application Gateway to handle plus-sign without an error or is only possible solution to just switch to load balancer and put 2 Haproxies behind that (haproxy does know how to handle plus-sign)?

And how can it give 404 error since it doesn't even forward the request to the backend servers and it's an application gateway, it shouldn't even serve own files (or is the actual error page missing)? Shouldn't it give Internal Server error if +-sign is too confusing or 403 forbidden if it's not allowed? Or 501 Not Implemented if support for plus signs is not yet ready?

VNets in ARM now working as they used to in ASM?

$
0
0

Hi,

I've been away from Azure for a few months (which in Azure land is equal to 10 years).  Last time I used the new resource manager portal there didn't seem to be a way of building a underlying VNET that supported multiple VMs.  It was a case of one vnet per resource group, which was a bit of a pain if I wanted to create a S2S VPN. 

In the classic days you'd build a VNet with subnets and then plug cloud services into it.  So it was like a cloud version of a proper on-premise network topology.  It appears that ARM now supports this, I've just created a VNET on it's own and then pointed VMs to use it as their network.  So I just wanted a sanity check really, am I right in thinking I can have a single VNet that'll host multiple VMs in different resource groups?

Cheers

Viewing all 6513 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>