First I have a working Site-to-Site VPN Gateway to an Azure VNet. However after a day or two the Gateway connection connection fails. I'm trying to find the cause as to why it will work for 1 to 2 days. Trying to trouble shooting the problem with powershell the Gateway has no diagnostics URL to get information from once the issue occurs. before the error happens i can get the Diagnostics.
I can not disconnect or connect the gateway using the azure web interface or powershell. Restarting the VPN connection on our firewall has no affect. Waiting up to 2 hours offers no change. Nothing i try seems to have any affect using both the web interface or Powershell.
The only way to re-establish the VPN Gateway is to delete the gateway, and recreate it entirely. This takes about 30 minutes waiting for the New Azure Gateway to be Provisioned.
The VPN Connection is a Juniper SRX220 running JUNOS 12.1X44-D40.2.
When the new gateway is up and connected there is nothing in the Juniper's Logs but the Azure Gateway Diagnostics does have an error which is lsited every 9 seconds.
[0]0364.078C::02/02/2015-13:38:57.322 [user] |XX.XXX.XXX.XXX|IkeProcessInformationalRequestIkeV2 failed with Windows error 13804(ERROR_IPSEC_IKE_GENERAL_PROCESSING_ERROR)[0]0364.078C::02/02/2015-13:38:57.322 [user] |XX.XXX.XXX.XXX|IkeProcessInformationalRequestIkeV2 failed with HRESULT 0x800735ec(ERROR_IPSEC_IKE_GENERAL_PROCESSING_ERROR)
The IPSEC proposal matches exactly what requested in the configuration Azure offers for Juniper SRX Dynamic Gateways.
I've created a ticket with Microsoft but after 3 days have yet to hear back.
The only thing odd that maybe going on is that i'm transferring A large amount of data across the connection, say 50-80 GB a day as i'm trying to move a File server to Azure. I just can't believe that amount of data is causing the issue, and if it is then why and how to prevent it.