Is traffic manager designed for its own failover (built in) or do we need run it from multiple regions in order it be resilient? It seems like a single point of failure in itself if it does not have any failover capabilities.
Tried finding this out but could not find a definitive answer anywhere.
Thanks
Hi
Is there a powershell command avaliable to create a second Virtual Network in Azure?
All i can find is Set-AzureVNetConfig which will try to modify my existing one, instead of creating a second one.
Zeatech
Hi,
Trying to connect a Cisco ISA570 to the Azure Virtual Network. I know that the ISA570 is not a officially supported model. But there have been people that have successfully connected with the device.
If there is anyone that has achieved this and wouldn't mind giving some pointers on ho this was accomplished, it would be gratefully appreciated.
Thanks,
Wayne Innes
I have a point to site VPN working from two computers to Azure. It has been working for months with no issue.
Today, both computers fail to authenticate with the message:
The remote access connection completed, but authentication failed because the certificate that authenticates the client to the server is not valid. Ensure that the certificate used for authentication is valid.
(Error 853) For customized troubleshooting information for this connection, click Help.
The certificate is supposed to expire on 10/10/2021 so that isn't the issue.
Help please.
Hey ,
I'm having requirement to create a site to site VPN between Azure and local .
in local it's running a Checkpoint FW ( R75.47 ).
I'm having a confusion with assigning and creating network with this.
I'll provide sample IP Subnets in my requirement.
Azure Virtual Server Network private IP subnet - 10.2.30.0/24
Azure Virtual Server Public IP address - 123.21.52.32
Checkpoint Network private IP subnet - 192.168.2.0/24
Checkpoint Network Public IP subnet - 223.52.12.31
please advise me that how can i define these VIRTUAL NETWORK ADDRESS SPACES andSITE TO SITE CONNECTIVITY
regards,
dinidunet
I installed Microsoft CRM on windows Azure virtual PC,
How I can access the link from out side the virtual machine .
Regards.
We have deployed our Azure web application to two separate data centers (one located in West Europe and the other located in South east Asia) for purely performance reasons. We have a configured a Traffic Manager to route requests between these two DC's based on performance. However, when users in Shanghai try to access the site, they are routed to the DC in West Europe when ideally they should have been routed to SE Asia DC. Due to this, users in Shanghai are not seeing the intended performance benefit. However, it works well from India and Europe i.e. they are routed to the closest DC. What could be the problem? Also, is there a way to test traffic manager's performance based routing to see if it working as expected?
We are wit's end on an Azure-Meraki site to site VPN issue that is causing us massive headaches. Here is the scenario we hope someone can help with:
We have a customer that has offloaded all their servers into Windows Azure. Everything is working great in terms of the virtual machine aspect of Azure, but we have one box that has to have
a site to site tunnel running in order to communicate with a client app that runs on some PCs at the office. Which was fine, we thought, as Azure supports site to site VPNs, so our journey began...
Our original router was a Cisco RV042G, but this was a no-go as Cisco limits pre shared keys on this device at 30 characters. Azure needs 32 characters no less. That was a dead end which we replaced with a Sonicwall TZ as a last minute purchase...
The Sonicwall was a nightmare. Their support team treated us like heretics because we did not purchase a support plan through them instead of through CDW. Even after purchasing a support plan a second time through them, they couldn't get a reliable tunnel working to Azure. Very poor support team, lest we say that we won't be buying any more Sonicwall devices after that experience...
So we finally replaced the Sonicwall with a Meraki MX60. Liking the Meraki gear as we are putting more of their devices into the field and liking what they offer. Problem is that we have gotten a proper tunnel setup to Azure from the Meraki box, and Meraki says all settings are 100%, but we are still experiencing drops either in a few hours or in a couple days.
Meraki says their logs show no issues with the box.... ISP says their connection is stable as ever... the only side we cannot get a definitive answer from is Azure. There seems to be no way to get a log of how the VPN looks on their service unless we open a support ticket, but don't get me started on that, as they refuse to provide MS partners with decent support without paying for an extra hefty fee. Crazy for as much business as we push their way for Azure.
Regardless, I was curious if anyone else here has experience with a site to site tunnel up to Azure, specifically on a Meraki box, dropping at random intervals and refusing to reconnect.
I have been doing some reading and some online claim that the MTU for Azure needs to be 1350 and changing their firewall to this MTU fixes it, and others say that Dynamic Routing VPN setup works better than Static Routing VPN due to a lack of dead peer detection on a Static Route VPN.... any actual evidence to either of these being the case?
We've been picking and poking around this tunnel for the last week or so, and need some solid third party insight on what may be going on. It's frustrating to have this tunnel dropping so often, and Microsoft claims Azure is enterprise ready.... I don't know who to believe during this troubling time.
Is there something that may be taking the tunnel down due to inactivity? And would it be Azure doing it or the Meraki?
Any insight is appreciated. We need to get this going for the client as Azure is working very well in all aspects other than this site to site tunnel.
In the MSDN subscription I have the same issue like reported in http://social.msdn.microsoft.com/Forums/windowsazure/en-US/c876260c-9eb5-4f14-8a94-6489020cf260/cannot-delete-my-virtual-network?forum=WAVirtualMachinesVirtualNetwork
But in my case it's more than a month ago since I deleted the last elements in two separate networks. Since that, the dashboard shows no resources in the VNets, yet I can't delete or reconfigure them. (There's no Gateway configured for these networks)
The issue started back in April there were VMs that couldn't be reconfigured from the Standard tier to the Basic tier, at that time the machines even couldn't be deleted.
Already checked that there are no additional VMs listed with Get-AzureVM than listed in the Azure Portal. Further we already tried to delete a VPN gateway - as expected there was an error that there's no Gateway configured for the VNet.
I have a point-to-site VPN connection configured for my Azure Virtual Network. I am using certs I created from a PKI I have created in the AD running in the Azure virtual network. I can connect to the Virtual Network from a client computer just fine.
However, if I revoke the client certificate that was issued by my PKI, the client can still connect--are CRL checks not being performed when a point-to-site VPN connection is made? Or is there something else that needs to be done?
Thanks,
Mark
I have a VM that is attached to a Cloud Service that is named the same as the VM, which is the default. The VM has been running a production application for over a year now. I wanted to attach the Traffic Manager to the Cloud Service, but when I do and try to visit the site with Traffic Manager's URL, it says the page is not found (404). This site is running https, and I have looked at all of the forums that have had related issues, but I haven't resolved this issue yet.
I have already tried changing the configuration of the traffic manager to https instead of http, and it does nothing. My site has a trusted certificate, so it's not rejecting an untrusted certificate. I have also pinged the traffic manager from PowerShell and it comes back with the VM's name, so I know traffic manager knows what it's looking at, but there is no response from the ping either.
I can't just build the entire project to work with Cloud Services alone, because there are three different services plus the web client, and the time to rebuild everything will take too long for what higher-ups want from me. I also inherited this project from someone who doesn't work here anymore, so rebuilding is going to take some discovery and I have very few resources. I need to get this to work with the traffic manager so I can spend time developing a new solution to work with more of the components that Azure has to offer.
Any help would be greatly appreciated.
Our point to point VPN has hung. It's not our gateway end this has been tested but the Azure end. How do I reset it, tried PowerShell but still get an error?
VERBOSE: 09:44:24 - Begin Operation: Set-AzureVNetGateway
Set-AzureVNetGateway : InternalError : An internal error has occurred.
At line:1 char:1
+ Set-AzureVNetGateway -connect -VNetName "*******" -LocalNetworkSiteName "*******"
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : CloseError: (:) [Set-AzureVNetGateway], CloudException
+ FullyQualifiedErrorId : Microsoft.WindowsAzure.Commands.ServiceManagement.IaaS.SetAzureVNetGatewayCommand
Hi,
Can I set up Azure VPN to a windows 2012 R2 host hosted in Azure? Let's say I use Microsoft Azure as my datacenter, and I want to be able to use Hybrid Azure Remote App. Then I need to configure VPN to on-prem, but since Azure is my "on-prem" environment, I need to use VPN against Microsoft Azure.
Christian
I need to use internationalized domain name with azure web site. But I cannot register it, the error "Invalid format". I cannot use punycode also. The portal UI does not allow "-" symbol for 1 level domain name part.
Is it possible to use internationalized domain name with azure? And if so, how to enter the name properly?
We were previously receiving very low latency (sub 20ms) between our office in Baltimore, MD to Azure East, however in the past couple of weeks the latency is now 130ms+.
What's the best route to resolve the issue?
3 4 ms 4 ms 3 ms xe-5-2-0.was12.ip4.tinet.net [213.200.84.121]Hi,
We tried configuring vnet to vnet connection by following documentation at http://msdn.microsoft.com/en-us/library/azure/dn690122.aspx
But getting below error on trying to use Set-AzureVNetGatewayKey to connect Vnets,
Command:
Set-AzureVNetGatewayKey -VNetName vnet1 -LocalNetworkSiteName vnet2 -SharedKey
Error:
Set-AzureVNetGatewayKey : multiple_matching_tokens_detected: The cache contains multiple tokens satisfying the
requirements. Call AcquireToken again providing more requirements (e.g. UserId)
Can you please provide us with some pointers to over come this error
Thanks in advance!
Hello,
I have two Web Application Proxy (WAP) servers running in the same Cloud Service (same public IPs). Their HTTPS endpoints (port 443) are load-balanced over TCP with the default Load-Balancing settings. I would like the load-balancing probe to specifically detect if the WAP functionality (WAP service) is running/available on each WAP server. Right now, it is simply checking the HTTPS port entirely for availability and does not detect any application-specific functionality which communicates over that port.
Can custom endpoint probes be configured to check the health status of the Web Application Proxy role?
Thanks,
Dave
Hi,
i have create site to site vpn in Azure. Now i want to test the connection from my local network. How can i test the connection is established or not from my local network
Thanks