Hi,
we are trying to create a VPN Site2Site to on-premise devices, but we are experiencing difficulties.
The configuration is shown in the diagram below.
In the on-premise configuration it has not been inserted the subnet 192.168.20.0/25, which however is known only by the virtual network of azure (so we would like to avoid recreating the VPN every time we need to increase the available subnet).
We then created a policy-based VPN (IKE1 required) and the IPsec tunnel seems active correctly. The Device1 can ping an IP of "Default Gateway VPN Subnet".
In the same VNET we created another subnet in which we will put the VM. The problem we find him when the VM1, we try to reach devices in the local network on-premise. Tracert shows a passage to the subnet gateway but stops them.
There is something wrong? missing some step?