Hooking up a Domain Name (Reserving a Public IP)

May 14, 2015, 6:46 pm

≫ Next: Reverse DNS Disappear

≪ Previous: New Site to Site VPN from Azure to Palo Alto firewall - Azure and Palo Alto shows VPN up but no traffic coming through.

$

0

0

I had a read through this:

https://msdn.microsoft.com/en-us/library/azure/dn690120.aspx?f=255&MSPPError=-2147217396

and a little bit of this:

https://msdn.microsoft.com/library/azure/dn690118.aspx?f=255&MSPPError=-2147217396

I'm pretty confused. When you buy hosting with anyone else, a fixed public IP address is standard and simple. It's absolutely necessary because without a fixed IP address, you can't hook a domain name up to the hosted service. I don't understand what we're supposed to do...

So, is there a step by step procedure we can go through to

a) Set up a fixed public IP address for our IIS server

b) Allow endpoints to be hit through this IP address (i.e. allow RDP, and HTTP access to this server via the IP address)

c) Allow the domain name to be hooked up to said IP address

d) Hook a certificate up to aforementioned domain name and IP address.

Microsoft, please make this simpler!

Thanks

---

Reverse DNS Disappear

May 25, 2015, 3:34 am

≫ Next: Azure site to site VPN is not working and I get error IKE authentication credentials are unacceptable

≪ Previous: Hooking up a Domain Name (Reserving a Public IP)

$

0

0

We deploy the Exchange server in Windows Azure, Singapore, and set the reverse DNS lookup, everything was all right, until last week, suddenly found that we reverse DNS disappeared, but we see in the server, record still exist.

We try to delete the original records, reset the reverse DNS, there is still no success.

Who can tell me, what happened, or how should solve?

C:\>nslookup mail.cxxralliance.asia
Server:  UnKnown
Address:  192.168.0.254

Authority reply::
Name:    mail.cxxralliance.asia
Address:  111.221.81.181


C:\>nslookup 111.221.81.181
Server:  UnKnown
Address:  192.168.0.254

*** UnKnown can't find 111.221.81.181: Non-existent domain

Azure site to site VPN is not working and I get error IKE authentication credentials are unacceptable

May 25, 2015, 1:40 pm

≫ Next: Cross Routing VPN Site-To-Site

≪ Previous: Reverse DNS Disappear

$

0

0

I am trying to configure Azure site to site VPN through Windows 2012 r2 RRAS

I have run the script but I get error

IKE authentication credentials are unacceptable

Cross Routing VPN Site-To-Site

May 25, 2015, 7:13 am

≫ Next: Vnet to Vnet via Express Route

≪ Previous: Azure site to site VPN is not working and I get error IKE authentication credentials are unacceptable

$

0

0

Hello,
I have a simple question.
Looking at following network diagram, is it possible to reach Windows Azure-East Asia site fromOn-Premise without setting up Link 3 (using Link 1&Link 2) ?

Thank you,
Luca

---

Disclaimer: This posting is provided AS IS with no warranties or guarantees, and confers no rights. Whenever you see a helpful reply, click on [Vote As Help] and click on [Mark As Answer] if a post answers your question.

Vnet to Vnet via Express Route

May 26, 2015, 2:18 am

≫ Next: certificate i made with makecert.exe is not working with my VPN site to site. just giving an error cannot upload your certificate.

≪ Previous: Cross Routing VPN Site-To-Site

$

0

0

Hi, I have a simple question, despite i may have the answer.

Can we use express route to connect two Azure VNets ?

---

Regards, Samir Farhat || Datacenter Consultant || The way to share my knowledge with the communityVisit my blog : buildwindows.wordpress.com

certificate i made with makecert.exe is not working with my VPN site to site. just giving an error cannot upload your certificate.

May 26, 2015, 8:50 pm

≫ Next: Service integration issuer certificate not found.

≪ Previous: Vnet to Vnet via Express Route

$

0

0

certificate i made with makecert.exe is not working with my VPN site to site. just giving an error cannot upload your certificate.  

Service integration issuer certificate not found.

May 27, 2015, 2:48 am

≫ Next: What is Issuer secret?? What should be its input.??

≪ Previous: certificate i made with makecert.exe is not working with my VPN site to site. just giving an error cannot upload your certificate.

$

0

0

I am getting the above error when I am trying to verify and authenticate Service Endpoint using pluginregistration tool.

What is Issuer secret?? What should be its input.??

May 27, 2015, 3:04 am

≫ Next: Unable to Set the Networking Rules

≪ Previous: Service integration issuer certificate not found.

$

0

0

I am using PersistentQueueListener from SDK to receive messages from Service Bus. While I run the PersistentQueueListener Project it expects few imputs like

1. Service NameSpace

2. Issuer name

3. Issuer secret.

I don't have a clue of Issuer secret here. and what should be given here. I know the issuer name from "developer resources" in CRM application.

---

Unable to Set the Networking Rules

May 27, 2015, 5:21 am

≫ Next: Cross-Premise via ExpressRoute

≪ Previous: What is Issuer secret?? What should be its input.??

$

0

0

Hi,

I have created the NetworkSecurityGroup but i cannot update the rules in the Security Group.I have followed  the steps

https://management.core.windows.net/84da9df4-cf54-4040-9743-9fbbda1903f0/services/networksecuritygroups/TestSG/rules/testcheck

Request Headers:

content-type: application/xml

x-ms-version:2014-10-01

Request Body

<Rule xmlns="http://schemas.microsoft.com/windowsazure">
  <Name>testcheck</Name>
  <Type>Inbound</Type>
  <Priority>100</Priority>
  <Action>Allow</Action>
  <SourceAddressPrefix>*</SourceAddressPrefix>
  <SourcePortRange>22</SourcePortRange>
  <DestinationAddressPrefix>*</DestinationAddressPrefix>
  <DestinationPortRange>22</DestinationPortRange>
  <Protocol>TCP</Protocol>
</Rule>

It Shows an error like

<Errorxmlns="http://schemas.microsoft.com/windowsazure"xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
<Code>ResourceNotFound</Code>
<Message>The resource service name networksecuritygroups is not supported.</Message>
</Error>

Cross-Premise via ExpressRoute

May 27, 2015, 2:43 pm

≫ Next: How to connect azure with cloud9?

≪ Previous: Unable to Set the Networking Rules

$

0

0

We currently have a remote physical data center in which we are possibly looking at moving to Azure. Currently the mechanism in place for seeing the VM's on the remote side is via Cisco ASR's. 

If we move to Azure, how can we assure that the VM IP address (static) will remain the same in Azure. This may be a simple question but need to know if it can be done. 

So with that said, if we are on on-premise and have to fail a VM over to Azure, how do we proceed to make sure that the VM has the same IP address as on premise and in Azure? (Given, neither site will have the same VM up at the same time). 

The mean reason is that a lot of coding is to IP and not necessarily FQDN.

Thanks for your time.

How to connect azure with cloud9?

May 28, 2015, 4:05 am

≫ Next: Azure Internal Load Balancer - Internal Endpoint reverts to Public?!

≪ Previous: Cross-Premise via ExpressRoute

$

0

0

I have project written in Cloud9 and I want to export the project to Azure. How can I do it with using Traffic Manager?

Azure Internal Load Balancer - Internal Endpoint reverts to Public?!

May 28, 2015, 4:48 am

≫ Next: how can we enable or configure S2S VPN as a backup for ExpressRoute

≪ Previous: How to connect azure with cloud9?

$

0

0

Hello everybody,

I believe I have come across a bug with the Azure Internal Load Balancing. My situation is as follows:

- 2 ADFS servers have been created in Azure in the same subnet and dedicated Cloud Service/Domain Name

- In order to load balance/provide HA for these servers, I created an Azure Internal Load Balanced Set successfully using the following PS command:

• Add-AzureInternalLoadBalancer-ServiceName$svc-InternalLoadBalancerName$ilb–SubnetName$subnet–StaticVNetIPAddress$IP

- I then successfully added Endpoints to the 2 ADFS servers using the following PS command:

• Get-AzureVM -Name "$vm" -ServiceName "$svc" | Add-AzureEndpoint -LBSetName "$ilb" -Name "$name" -Protocol "http" -LocalPort 80 -PublicPort 80 -DefaultProbe | Update-AzureVM

- I then configured the DNS record for my ADFS service to point to the IP address assigned to the ILB, but when I navigate to the ADFS site it doesn't work at all. ADFS itself has been tested on both servers and is fully functional.

I believe this is a bug within Azure because if I look at the Preview Portal and the Load Balanced Endpoint, it reports it as a public endpointand shows me a public IP address, even though the endpoint was clearly added to an Internal Load Balancer. I have also run Get-AzureEndpoint which also shows me a Public IP address as the VIP...

If I remove the endpoint and try to add it through the Preview Portal by going to the VM>All Settings>Load Balanced Sets>Join and select Internal, it shows me the ILB I created as a selectable option but doesn't actually let me click OK.

This issue has been reproduced on my test Azure subscription also.

If anybody could assist it would be much appreciated :)

David

how can we enable or configure S2S VPN as a backup for ExpressRoute

May 28, 2015, 5:21 pm

≫ Next: Multi-Hop Routing

≪ Previous: Azure Internal Load Balancer - Internal Endpoint reverts to Public?!

$

0

0

Hi

We're urgently looking how we can configure S2S VPN as a backup for ExpressRoute. We currently have Expressroute enabled by using an exchange provider.

many thanks in advance

Dimi

Multi-Hop Routing

May 25, 2015, 7:13 am

≫ Next: Virtual Network Gateway in Azure Resource Manager

≪ Previous: how can we enable or configure S2S VPN as a backup for ExpressRoute

$

0

0

Hello,
I have a simple question.
Looking at following network diagram, is it possible to reach Windows Azure-East Asia site fromOn-Premise without setting up Link 3 (using Link 1&Link 2) ?

Thank you,
Luca

---

Disclaimer: This posting is provided AS IS with no warranties or guarantees, and confers no rights. Whenever you see a helpful reply, click on [Vote As Help] and click on [Mark As Answer] if a post answers your question.

Virtual Network Gateway in Azure Resource Manager

May 29, 2015, 12:18 pm

≫ Next: Can I use public IP addresses in the Virtual Network address space?

≪ Previous: Multi-Hop Routing

$

0

0

Doesn't the REST API contain Virtual Network Gateway yet?

Got this error in AzureResourceManager mode, and a similar one when deploying an ASR template containing a gateway.

PS C:\> Get-AzureVirtualNetworkGateway -ResourceGroupName ResourceGroup1
Get-AzureVirtualNetworkGateway : InvalidResourceType: The resource type could not be found in the namespace 'Microsoft.Network' for api version '2015-05-01-preview'.
At line:1 char:1
+ Get-AzureVirtualNetworkGateway -ResourceGroupName ResourceGroup1
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : CloseError: (:) [Get-AzureVirtualNetworkGateway], CloudException
    + FullyQualifiedErrorId : Microsoft.Azure.Commands.Network.GetAzureVirtualNetworkGatewayCommand

It is included in the documentation here: msdn.microsoft.com/en-us/library/azure/mt130667.aspx

---

Can I use public IP addresses in the Virtual Network address space?

May 31, 2015, 8:46 pm

≫ Next: Cannot connect Windows Azure Point to Site VPN

≪ Previous: Virtual Network Gateway in Azure Resource Manager

$

0

0

Network administrators are requesting that I provide the public IP addresses of the Azure services to be accessed via the site-to-site VPN.

I am unsure if this is possible.

Any help would be appreciated.

Thanks!

Cannot connect Windows Azure Point to Site VPN

June 1, 2015, 2:46 am

≫ Next: Strongswan VPN traffic is not routing to other hosts within the virtual network.

≪ Previous: Can I use public IP addresses in the Virtual Network address space?

$

0

0

Hi,

I Have created a Virtual Network in Azure by Following the Steps in Azure Site

But When I Try to connect the VPN, I am receiving the following Error.

A certificate could not be found that can be used with this Extensible Authentication Protocol. (Error 798)

How can I solve the issue.

Strongswan VPN traffic is not routing to other hosts within the virtual network.

May 31, 2015, 11:42 pm

≫ Next: Debug a WCF REST Service BUS relay

≪ Previous: Cannot connect Windows Azure Point to Site VPN

$

0

0

We are trying to get multiple VPN connections to an Azure virtual network. All VPN clients will be running Linux and are roaming and behind NATs (road warrior style). Strongswan isn't exactly supported and it seems only a site-to-site VPN will work using Microsoft's gateway. I ended up adding another VM that will just act as a dedicated VPN server running Strongswan. After setting up IPsec endpoints, I have been able to successfully connect multiple clients to the new virtual VPN server. I can ping from the clients to the VPN server and vice versa. I can't however, access the other virtual host which is on the same virtual network local subnet. I have a strong feeling that Azure is blocking the forwarding of traffic somehow. Has anyone else tried setting up a VPN server within Azure?

Debug a WCF REST Service BUS relay

April 26, 2013, 11:56 am

≫ Next: How I set-up a NSG for recive traffic from internet

≪ Previous: Strongswan VPN traffic is not routing to other hosts within the virtual network.

$

0

0

Hi all,

I have a WCF REST service that is deployed to IIS on my development machine and running and is a listener to service bus.

I attached the listener service VS to w3wp process , but when I invoke the listener from client through service bus, the debugger in the listener WCF service does not hit ?

How do I debug the listener service when the calls are made from the service bus relay ?

- Girija

How I set-up a NSG for recive traffic from internet

June 1, 2015, 4:02 pm

≫ Next: Error running Get-AzureEndpoint - "Cannot bind parameter 'VM'. Cannot convert the "ssasnodeaz03" value of type "System.String" to"

≪ Previous: Debug a WCF REST Service BUS relay

$

0

0

Hi I have some troubles about how to configure a VM that has a CRM environment,
I want to access through internet to CRM server in VM Azure
I read about it and I found that i need to set up a NSG
I tried but appear some error about location
New-AzureNetworkSecurityGroup –Name <nome-do-NSG> –Location <Local-do-Azure-Datacenter> –Label “ADFS Proxy DMZ NSG”
I tried to get the location but appeared the error that i need to set default subscription , and I tried to do it but i dont know what is the subscription name