HTTP traffic does not reach VM in Azure via VPN

January 12, 2014, 4:02 pm

≫ Next: Azure P2S (Point-to-Site) VPN Client issue - The service profile is damaged. Reinstall the service profile

≪ Previous: VMs in virtual network w/ STS lose connectivity

$

0

0

I have successfully create a VPN between my office network and Azure. I have one VM running in Azure with IIS installed and running. I have created a HTTP endpoint and I can access the website from off the network, but I cannot access the website from any machines on the office network using its private IP (10.0.0.4).  The request times out after one minute.

I have tried turning off the firewall on the VM.

The VPN connection is to a TMG server on our network.  The TMG server shows the HTTP traffic going out.

From a computer on the office network I can RDP and access shares on the VM so office machines have a route to the VM.  From the VM I can access HTTP sites on the office network.

The IIS log files on the VM have no entries for a machine on the office network.

Any ideas on what is preventing HTTP traffic from flowing from my office network to the Azure VM?

---

Azure P2S (Point-to-Site) VPN Client issue - The service profile is damaged. Reinstall the service profile

November 13, 2013, 3:06 am

≫ Next: Set-up a VPN connection to Windows Azure Virtual network

≪ Previous: HTTP traffic does not reach VM in Azure via VPN

$

0

0

Hi,

yesterday I could not connect to P2S VPN because the Client failed with the "Service Profile is damaged" message occured on connection.

I recreated the VPN Gateway and generated a new client package. Now the Connection works but on disconnect I get the error message "Service Profile is damaged".

Any ideas ?

Regards

Torsten 

---

Torsten Kuhn

Set-up a VPN connection to Windows Azure Virtual network

January 13, 2014, 10:17 am

≫ Next: Management service alerts & logs for Virtual Networks?

≪ Previous: Azure P2S (Point-to-Site) VPN Client issue - The service profile is damaged. Reinstall the service profile

$

0

0

Hi all,

Is it possible at all to establish a VPN connection to Windows Azure Virtual Network as a part of the build process on Hosted TFS (Visual Studio Online)? I would like to run integration tests that would connect to local instances of worker roles on my Virtual Network. I have already created a gateway for the Virtual Network and I am able to establish VPN connection between the Virtual Network and my local Windows 2012 Server virtual machine. Moreover I have it all scripted in Powershell. The problem is that when I set my script as pre-test script in the build definition, the build fails with following errors:

Set-ExecutionPolicy : Windows PowerShell updated your execution policy successfully, but the setting is overridden by a policy defined at a more specific scope... Import-PfxCertificate : Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED Here is the script that I am trying to execute: Set-ExecutionPolicy -Scope CurrentUser Unrestricted $scriptpath = $MyInvocation.MyCommand.Path $dir = Split-Path $scriptpath #import client certificate $mypwd=ConvertTo-SecureString "*******" -Force -AsPlainText Import-PfxCertificate -FilePath (Join-Path $dir certificates\MyClientCertificate.pfx) cert:\CurrentUser\My -Password $mypwd Import-PfxCertificate -FilePath (Join-Path $dir certificates\MyClientCertificate.pfx) cert:\localMachine\my -Password $mypwd #add trusted root certificate $cert=New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 $certPath = Join-Path $dir "certificates\trusted-root-cert.cer" $cert.import($certPath) $store=New-Object System.Security.Cryptography.X509Certificates.X509Store("AuthRoot","LocalMachine") $store.open("MaxAllowed") $store.add($cert) $store.close() #opening VPN connections goes below

Management service alerts & logs for Virtual Networks?

January 14, 2014, 11:26 am

≫ Next: How do you change MSDN Language on this forum - It's appearing in Chinese

≪ Previous: Set-up a VPN connection to Windows Azure Virtual network

$

0

0

We have several Azure virtual networks setup, and they randomly drop/disconnect.  We'd like to setup an alert when the connection drops, and we would also like to review logs to figure out why the connection dropped.  Is there any way to do this?  We looked at Management Services but this seems to be at VM/Cloud Service level only. 

Also, is there any way to implement a 2nd virtual network and load balance that in case the primary/original virtual network drops (as we are seeing lately)?

How do you change MSDN Language on this forum - It's appearing in Chinese

January 14, 2014, 1:09 am

≫ Next: Local network on same account between sites en sql database

≪ Previous: Management service alerts & logs for Virtual Networks?

$

0

0

Hi

I didn't do anything and around a couple of days ago my default language has changed to chinese on this forum. I'm using chrome to write this question as it automatically translates it.

Thanks

screenshot:

Local network on same account between sites en sql database

January 17, 2014, 1:28 am

≫ Next: IaaS - Virtual network

≪ Previous: How do you change MSDN Language on this forum - It's appearing in Chinese

$

0

0

Hey everyone,

I've just installed an orchard and a magelia site (azure websites) + created an sql db.

Now the magelia site connects to the sql db via a .database.windows.net connectionstring. So I'm guessing this goes out to the internet and then comes back.

The orchard site connects to the magelia site also via an outside link so this again fetches the data over the internet and back.

Is their a way that I can locally interconnect these 2 sites and the db?

Borrie

IaaS - Virtual network

January 15, 2014, 9:33 pm

≫ Next: Windows Azure Network Intrusion

≪ Previous: Local network on same account between sites en sql database

$

0

0

Hi,

I have some series of question on windows azure IaaS.

1. When we create virtual network is it covered with the firewall layer ?

2. VM which we get under the IaaS is shared with others ?

3. what is the difference between the network and private network ?

Windows Azure Network Intrusion

January 15, 2014, 10:57 pm

≫ Next: How to allow Web/Worker roles access to VM on an VNet?

≪ Previous: IaaS - Virtual network

$

0

0

Hi,

How we do the windows Azure network intrusion for the azure VMS, Can we use the 3rd party tools for the virtual network intrusion ...?

Regards,

Sharan

---

How to allow Web/Worker roles access to VM on an VNet?

July 30, 2012, 7:48 am

≫ Next: Windows azure virtual machine log monitoring

≪ Previous: Windows Azure Network Intrusion

$

0

0

Hello,

I want to allow service on virtual machines to be accessable by Worker and Web roles, suggestions are this is done using Vnet.

So, I have created a Vnet and added a VM into that VNet.  I also have a Worker role that I want to be able to access services on the VM. All in same DC and AG.

How do I configure the Worker role to have access to the Vnet and therefore the VM?

Many Thanks

Andy

Windows azure virtual machine log monitoring

January 17, 2014, 9:39 am

≫ Next: Azure Site-to-Site VPN never shows "Connected"

≪ Previous: How to allow Web/Worker roles access to VM on an VNet?

$

0

0

hi,

suppose i have deployed a solution in windows azure and i want to  monitor the  application logfile how can i do that ?

if the developer ask for the log file i should be able to download these log files from the azure VM

Azure Site-to-Site VPN never shows "Connected"

January 18, 2014, 6:08 am

≫ Next: Error 13801 when connecting to Azure Gateway

≪ Previous: Windows azure virtual machine log monitoring

$

0

0

I just set up a new VPN connection from our Azure virtual network to our office. I am able to ping and RDP on both sides so everything is working fine. 

The problem is that Azure always displays "Connecting" on the VPN status. On our firewall, if the connection is unused for more than ~30 seconds, the tunnel is dropped until interesting traffic appears. 

When I had first gotten it set up, Azure showed "Connected". Now it no longer shows that, even though I can see that the two sides are connected and I have connectivity between the two networks.

Why won't Azure keep the connection up and show that it is "Connected"? The fact that the tunnel drops so frequently is causing issues for our application.

Error 13801 when connecting to Azure Gateway

September 6, 2013, 6:24 am

≫ Next: XML validation error when attaching site-to-site VPN through manage.windowsazure.com

≪ Previous: Azure Site-to-Site VPN never shows "Connected"

$

0

0

I have followed a number of different blogs to configure a site-to-site VPN with Azure.   When the demand dial connection starts, the following occurs:

Message 1

CoId={28E6AE60-C778-4DE0-AE36-0046FA39B40B}: The user SYSTEM has started dialing a VPN connection using a all-user connection profile named x.x.x.x. The connection settings are:

Dial-in User =

VpnStrategy = IKEv2

DataEncryption = Require

PrerequisiteEntry =

AutoLogon = No

UseRasCredentials = Yes

Authentication Type = PreShareKey

Ipv4DefaultGateway = Yes

Ipv4AddressAssignment = By Server

Ipv4DNSServerAssignment = By Server

Ipv6DefaultGateway = Yes

Ipv6AddressAssignment = By Server

Ipv6DNSServerAssignment = By Server

IpDnsFlags =

IpNBTEnabled = No

UseFlags = Private Connection

ConnectOnWinlogon = No

Mobility enabled for IKEv2 = No.

Message 2:

CoId={28E6AE60-C778-4DE0-AE36-0046FA39B40B}: The user SYSTEM is trying to establish a link to the Remote Access Server for the connection named x.x.x.x using the following device:

Server address/Phone Number = x.x.x.x

Device = WAN Miniport (IKEv2)

Port = VPN2-4

MediaType = VPN.

Message 3:

CoId={28E6AE60-C778-4DE0-AE36-0046FA39B40B}: The user SYSTEM has successfully established a link to the Remote Access Server using the following device:

Server address/Phone Number = x.x.x.x

Device = WAN Miniport (IKEv2)

Port = VPN2-4

MediaType = VPN.

Message 4:

CoId={28E6AE60-C778-4DE0-AE36-0046FA39B40B}: The link to the Remote Access Server has been established by user SYSTEM.

Message 5 (Error):

CoId={28E6AE60-C778-4DE0-AE36-0046FA39B40B}: The user SYSTEM dialed a connection named x.x.x.x which has failed. The error code returned on failure is 13801.

My ISP has confirmed there is no NAT and the firewall is wide open right now (hardware and software).

I have tried a self signed key with EKU's of Server Authentication and IP Security IKE Intermediate.

I've seen others have this problem but no solution. Anyone have any ideas?

XML validation error when attaching site-to-site VPN through manage.windowsazure.com

January 17, 2014, 10:50 am

≫ Next: Trouble accessing Azure Sharepoint apps from the internet

≪ Previous: Error 13801 when connecting to Azure Gateway

$

0

0

I am getting an XML validation error from the manage.windowsazure.com portal, when I attached a site-to-site VPN to my (new) virtual network. This will be network #4, and the previous three didn't get this error. How do I diagnose the cause? I've tried varying the IP address ranges a bit, so I know this isn't a range conflict issue. Is there an associated outage?

Trouble accessing Azure Sharepoint apps from the internet

January 19, 2014, 6:45 am

≫ Next: Permanent Point-to-Site VPN to Azure for all VMs on my Hyper-V server

≪ Previous: XML validation error when attaching site-to-site VPN through manage.windowsazure.com

$

0

0

I am having trouble accessing Sharepoint apps running on Azure from the internet.

I have a simple Sharepoint 2013 farm on Microsoft Azure with one cloud service AZSQL1.cloudapp.net and 2 VMs -

AZSQL1 is for AD/SQL and AZSP1 is for Sharepoint. The domain is AZdomain and is completely separate from any on

premises networks. The Sharepoint server is set up to use AZSQL1 as its DNS server by putting 10.0.0.4 as the DNS

server address in the Ethernet properties. No subdomain was created. I have set up alternate access mapping for

AZSQL1.cloudapp.net
I have enabled Sharepoint apps and put a new CNAME record into the AZSQL1 DNS for FLZone AZdomain.com - the alias is *.app

and the target FQDN is AZSP1.AZdomain.com. I have downloaded a simple app from the Sharepoint store and added it to a demo

site.
From IE on AZSP1 I can go to site http://AZSP1/sites/mjtroot/demo1 and the app with URL http://app-

4070ed65585004.app.AZdomain.com will load and run correctly. However from the internet I access the site by

http://AZSP1.cloudapp.net/sites/mjtroot/demo1 and the app part gets a "page cannot be displayed" error since the app

URL cannnot be resolved.

Is there something I can change in AZSQL1 DNS to make this work?

Permanent Point-to-Site VPN to Azure for all VMs on my Hyper-V server

December 5, 2013, 3:00 am

≫ Next: Point-2-Site and static routing

≪ Previous: Trouble accessing Azure Sharepoint apps from the internet

$

0

0

I'm working from an office where I don't have control over the network and I cannot set up a site-to-site VPN that normally would be set up from Cisco box or similar.

I followed the steps for a Point-to-Site VPN and it works fine for my user when logged in: I can connect to my Azure VMs by using their internal addresses (10.0.1.x range), etc., so far so good.

But, what I really want to do is to have some of my local VMs run SharePoint web front ends towards the SharePoint farm hosted in Azure. How can I use my Point-to-Site VPN to use it for all Hyper-V VMs on a server? How can I make the VPN permanent and not only available for my user and only when I signed on?

---

Point-2-Site and static routing

January 20, 2014, 1:38 am

≫ Next: Windows Azure VM- Need to be installed with AntiVirus

≪ Previous: Permanent Point-to-Site VPN to Azure for all VMs on my Hyper-V server

$

0

0

Hi,

With my current VPN-Device im only available to use static routing and with this config you can't create a point-2-site connection, only using dynamic routing.

Is there any workaround for this? Like creating a secondary virtual network with only p2s and using the same network as the site-2-site?

Br,

Victor

Windows Azure VM- Need to be installed with AntiVirus

January 20, 2014, 4:04 am

≫ Next: Site to Site VPN with RRAS nearly working, so close!!!!

≪ Previous: Point-2-Site and static routing

$

0

0

Hi,

Do we need to install the Antivirus in Azure VM or is that taken care ..?

Site to Site VPN with RRAS nearly working, so close!!!!

January 20, 2014, 10:22 pm

≫ Next: How can i test Site to site VPN in Azure

≪ Previous: Windows Azure VM- Need to be installed with AntiVirus

$

0

0

Hi,

Basically I followed this post.

http://fabriccontroller.net/blog/posts/setting-up-software-based-site-to-site-vpn-for-windows-azure-with-windows-server-2012-routing-and-remote-access/

I have a single VM which is also a DC for testing S2S VPN. 

The whole section where he says "Line 75: Replace <SP_AzureGatewayIpAddress>" is now not needed as the script already has all of these settings prepopulated.

As this did not quite work I went back and allowed all on the firewall this didnt work, I then disabled the firewall all together. Still no luck.

I then ran PS$ "Connect-VpnS2SInterface -Name 137.116.161.75" on the server still no luck.

See on the VM says it is connected in RRAS (this only works with the Firewall disabled, this proves there is an issue with my FW rules, but let's ignore that for now and work on getting it connected then I can work backwards re-enabling and fixing the Firewall later).  ipconfig says the tunnel adapter is disconnected.

But then when I select Connect in Azure it is "Unable to establish the cross-premise tunnel for the site."

Any ideas??

How can i test Site to site VPN in Azure

January 21, 2014, 9:55 pm

≫ Next: How to get Virtual Network name for Virtual Machine in Azure PowerShell?

≪ Previous: Site to Site VPN with RRAS nearly working, so close!!!!

$

0

0

Hi,

i have create site to site vpn in Azure. Now i want to test the connection from my local network. How can i test the connection is established or not from my local network 

---

Thanks

How to get Virtual Network name for Virtual Machine in Azure PowerShell?

January 21, 2014, 10:54 pm

≫ Next: Ping and RDP over a VPN connection to Azure

≪ Previous: How can i test Site to site VPN in Azure

$

0

0

I want to know what Virtual Network name is for specific Virtual Machine.

How can I get this through PowerShell in Azure?