{"id":3338,"date":"2022-04-26T08:10:35","date_gmt":"2022-04-26T16:10:35","guid":{"rendered":"https:\/\/tungle.ca\/?p=3338"},"modified":"2022-05-07T11:13:07","modified_gmt":"2022-05-07T19:13:07","slug":"set-up-an-ipsec-vpn-site-to-site-between-fortigate-on-prem-and-microsoft-azure","status":"publish","type":"post","link":"https:\/\/tungle.ca\/?p=3338","title":{"rendered":"Set up an IPSEC VPN site-to-site between Palo Alto on-prem and Microsoft Azure"},"content":{"rendered":"\n<p>This is a diagram that I have used for the lab.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"844\" height=\"458\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-790.png\" alt=\"\" class=\"wp-image-3397\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-790.png 844w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-790-300x163.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-790-768x417.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-790-200x109.png 200w\" sizes=\"auto, (max-width: 844px) 100vw, 844px\" \/><\/figure>\n\n\n\n<p>Create a new virtual network is Azure-PA.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"673\" height=\"536\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-736.png\" alt=\"\" class=\"wp-image-3339\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-736.png 673w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-736-300x239.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-736-200x159.png 200w\" sizes=\"auto, (max-width: 673px) 100vw, 673px\" \/><\/figure>\n\n\n\n<p>Change default network to PrivateSubnet is 10.0.1.0.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"669\" height=\"496\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-737.png\" alt=\"\" class=\"wp-image-3340\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-737.png 669w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-737-300x222.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-737-200x148.png 200w\" sizes=\"auto, (max-width: 669px) 100vw, 669px\" \/><\/figure>\n\n\n\n<p>A subnet address range is 10.0.1.0\/24<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"250\" height=\"544\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-739.png\" alt=\"\" class=\"wp-image-3342\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-739.png 250w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-739-138x300.png 138w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-739-92x200.png 92w\" sizes=\"auto, (max-width: 250px) 100vw, 250px\" \/><\/figure>\n\n\n\n<p>Click Create.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"553\" height=\"771\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-741.png\" alt=\"\" class=\"wp-image-3344\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-741.png 553w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-741-215x300.png 215w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-741-143x200.png 143w\" sizes=\"auto, (max-width: 553px) 100vw, 553px\" \/><\/figure>\n\n\n\n<p>Create a new subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"881\" height=\"423\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-742.png\" alt=\"\" class=\"wp-image-3345\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-742.png 881w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-742-300x144.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-742-768x369.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-742-200x96.png 200w\" sizes=\"auto, (max-width: 881px) 100vw, 881px\" \/><\/figure>\n\n\n\n<p>A subnet address range is 10.0.0.0\/24<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"482\" height=\"619\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-743.png\" alt=\"\" class=\"wp-image-3346\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-743.png 482w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-743-234x300.png 234w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-743-156x200.png 156w\" sizes=\"auto, (max-width: 482px) 100vw, 482px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"403\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-744-1024x403.png\" alt=\"\" class=\"wp-image-3347\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-744-1024x403.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-744-300x118.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-744-768x303.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-744-200x79.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-744.png 1028w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Go to &#8220;Virtual network gateway&#8221; to create a new virtual network gateway.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"714\" height=\"573\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-745.png\" alt=\"\" class=\"wp-image-3348\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-745.png 714w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-745-300x241.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-745-200x161.png 200w\" sizes=\"auto, (max-width: 714px) 100vw, 714px\" \/><\/figure>\n\n\n\n<p>Virtual network: Azure-PA.<\/p>\n\n\n\n<p>Subnet: Gatewaysubnet 10.0.0.0\/24<\/p>\n\n\n\n<p>Public IP address name: VPNIP<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"704\" height=\"874\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-746.png\" alt=\"\" class=\"wp-image-3349\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-746.png 704w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-746-242x300.png 242w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-746-161x200.png 161w\" sizes=\"auto, (max-width: 704px) 100vw, 704px\" \/><\/figure>\n\n\n\n<p>Click Create.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"556\" height=\"841\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-747.png\" alt=\"\" class=\"wp-image-3350\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-747.png 556w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-747-198x300.png 198w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-747-132x200.png 132w\" sizes=\"auto, (max-width: 556px) 100vw, 556px\" \/><\/figure>\n\n\n\n<p>Wait around from 20 to 30 minutes to see if the Deployment is done.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"412\" height=\"252\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-749.png\" alt=\"\" class=\"wp-image-3352\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-749.png 412w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-749-300x183.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-749-200x122.png 200w\" sizes=\"auto, (max-width: 412px) 100vw, 412px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"970\" height=\"349\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-750.png\" alt=\"\" class=\"wp-image-3353\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-750.png 970w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-750-300x108.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-750-768x276.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-750-200x72.png 200w\" sizes=\"auto, (max-width: 970px) 100vw, 970px\" \/><\/figure>\n\n\n\n<p>Go to &#8220;Local network gateway&#8221; and create a new local network gateway.<\/p>\n\n\n\n<p>An IP address is a public IP address of the Palo Alto firewall.<\/p>\n\n\n\n<p>Address space is Palo Alto&#8217;s LAN subnets.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"673\" height=\"673\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-751.png\" alt=\"\" class=\"wp-image-3354\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-751.png 673w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-751-300x300.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-751-150x150.png 150w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-751-200x200.png 200w\" sizes=\"auto, (max-width: 673px) 100vw, 673px\" \/><\/figure>\n\n\n\n<p>Click create.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"637\" height=\"414\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-752.png\" alt=\"\" class=\"wp-image-3355\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-752.png 637w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-752-300x195.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-752-200x130.png 200w\" sizes=\"auto, (max-width: 637px) 100vw, 637px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"947\" height=\"321\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-753.png\" alt=\"\" class=\"wp-image-3356\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-753.png 947w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-753-300x102.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-753-768x260.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-753-200x68.png 200w\" sizes=\"auto, (max-width: 947px) 100vw, 947px\" \/><\/figure>\n\n\n\n<p>Go to &#8220;Virtual network gateways&#8221;, and select the virtual network gateways that we have created in the previous step.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"256\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-754-1024x256.png\" alt=\"\" class=\"wp-image-3357\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-754-1024x256.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-754-300x75.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-754-768x192.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-754-200x50.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-754.png 1043w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Go to &#8220;Connections&#8221; &#8211; Add.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"844\" height=\"339\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-755.png\" alt=\"\" class=\"wp-image-3358\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-755.png 844w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-755-300x120.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-755-768x308.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-755-200x80.png 200w\" sizes=\"auto, (max-width: 844px) 100vw, 844px\" \/><\/figure>\n\n\n\n<p>Enter a shared key (PSK) for VPN site-to-site.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"345\" height=\"897\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-756.png\" alt=\"\" class=\"wp-image-3359\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-756.png 345w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-756-115x300.png 115w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-756-77x200.png 77w\" sizes=\"auto, (max-width: 345px) 100vw, 345px\" \/><\/figure>\n\n\n\n<p>Take note of the IP address of Azure VPN.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"461\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-766-1024x461.png\" alt=\"\" class=\"wp-image-3369\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-766-1024x461.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-766-300x135.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-766-768x346.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-766-200x90.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-766.png 1322w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"328\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-757-1024x328.png\" alt=\"\" class=\"wp-image-3360\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-757-1024x328.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-757-300x96.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-757-768x246.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-757-200x64.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-757.png 1049w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"396\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-759-1024x396.png\" alt=\"\" class=\"wp-image-3362\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-759-1024x396.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-759-300x116.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-759-768x297.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-759-200x77.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-759.png 1159w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>On Palo Alto on-prem.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"928\" height=\"462\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-760.png\" alt=\"\" class=\"wp-image-3363\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-760.png 928w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-760-300x149.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-760-768x382.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-760-200x100.png 200w\" sizes=\"auto, (max-width: 928px) 100vw, 928px\" \/><\/figure>\n\n\n\n<p>Interface tunnel1.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"798\" height=\"546\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-761.png\" alt=\"\" class=\"wp-image-3364\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-761.png 798w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-761-300x205.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-761-768x525.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-761-200x137.png 200w\" sizes=\"auto, (max-width: 798px) 100vw, 798px\" \/><\/figure>\n\n\n\n<p>Create an IKE Crypto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"851\" height=\"579\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-762.png\" alt=\"\" class=\"wp-image-3365\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-762.png 851w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-762-300x204.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-762-768x523.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-762-200x136.png 200w\" sizes=\"auto, (max-width: 851px) 100vw, 851px\" \/><\/figure>\n\n\n\n<p>IPSEC Crypto.<\/p>\n\n\n\n<p>According to Azure, we will use 27000 seconds for the key lifetime. <\/p>\n\n\n\n<p><a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/vpn-gateway\/vpn-gateway-about-compliance-crypto#:~:text=IKEv2%20Main%20Mode%20SA%20lifetime,KBytes%20(102GB)%20are%20used.\">https:\/\/docs.microsoft.com\/en-us\/azure\/vpn-gateway\/vpn-gateway-about-compliance-crypto#:~:text=IKEv2%20Main%20Mode%20SA%20lifetime,KBytes%20(102GB)%20are%20used.<\/a><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>IKEv2 Main Mode SA lifetime is fixed at 28,800 seconds on the Azure VPN gateways.<\/li><li>QM SA Lifetimes are optional parameters. If none was specified, default values of 27,000 seconds (7.5 hrs) and 102400000 KBytes (102GB) are used.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"858\" height=\"586\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-764.png\" alt=\"\" class=\"wp-image-3367\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-764.png 858w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-764-300x205.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-764-768x525.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-764-200x137.png 200w\" sizes=\"auto, (max-width: 858px) 100vw, 858px\" \/><\/figure>\n\n\n\n<p>Create a new IKE Gateways.<\/p>\n\n\n\n<p>The peer address is the Azure VPN gateway.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"759\" height=\"607\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-765.png\" alt=\"\" class=\"wp-image-3368\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-765.png 759w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-765-300x240.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-765-200x160.png 200w\" sizes=\"auto, (max-width: 759px) 100vw, 759px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"766\" height=\"523\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-768.png\" alt=\"\" class=\"wp-image-3371\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-768.png 766w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-768-300x205.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-768-200x137.png 200w\" sizes=\"auto, (max-width: 766px) 100vw, 766px\" \/><\/figure>\n\n\n\n<p>Create an IPSEC tunnel.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"855\" height=\"482\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-767.png\" alt=\"\" class=\"wp-image-3370\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-767.png 855w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-767-300x169.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-767-768x433.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-767-200x113.png 200w\" sizes=\"auto, (max-width: 855px) 100vw, 855px\" \/><\/figure>\n\n\n\n<p>Create  astatic routes to PrivateSubnet on Azure.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"847\" height=\"629\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-769.png\" alt=\"\" class=\"wp-image-3372\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-769.png 847w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-769-300x223.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-769-768x570.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-769-200x149.png 200w\" sizes=\"auto, (max-width: 847px) 100vw, 847px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"887\" height=\"620\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-770.png\" alt=\"\" class=\"wp-image-3373\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-770.png 887w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-770-300x210.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-770-768x537.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-770-200x140.png 200w\" sizes=\"auto, (max-width: 887px) 100vw, 887px\" \/><\/figure>\n\n\n\n<p>Create both access rules to allow traffic from PA LAN subnets to private subnet on Azure and vice versa.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"929\" height=\"446\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-771.png\" alt=\"\" class=\"wp-image-3374\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-771.png 929w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-771-300x144.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-771-768x369.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-771-200x96.png 200w\" sizes=\"auto, (max-width: 929px) 100vw, 929px\" \/><\/figure>\n\n\n\n<p>Click &#8220;Commit&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"897\" height=\"563\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-772.png\" alt=\"\" class=\"wp-image-3375\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-772.png 897w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-772-300x188.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-772-768x482.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-772-200x126.png 200w\" sizes=\"auto, (max-width: 897px) 100vw, 897px\" \/><\/figure>\n\n\n\n<p>Back to Azure, the VPN site-to-site connection is still not connected.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"335\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-773-1024x335.png\" alt=\"\" class=\"wp-image-3376\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-773-1024x335.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-773-300x98.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-773-768x251.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-773-200x65.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-773.png 1053w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create a new Windows 2016 virtual machine (Size is B1s).<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"771\" height=\"896\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-774.png\" alt=\"\" class=\"wp-image-3377\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-774.png 771w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-774-258x300.png 258w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-774-768x893.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-774-172x200.png 172w\" sizes=\"auto, (max-width: 771px) 100vw, 771px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"635\" height=\"788\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-775.png\" alt=\"\" class=\"wp-image-3378\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-775.png 635w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-775-242x300.png 242w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-775-161x200.png 161w\" sizes=\"auto, (max-width: 635px) 100vw, 635px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"701\" height=\"796\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-776.png\" alt=\"\" class=\"wp-image-3379\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-776.png 701w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-776-264x300.png 264w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-776-176x200.png 176w\" sizes=\"auto, (max-width: 701px) 100vw, 701px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"684\" height=\"606\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-777.png\" alt=\"\" class=\"wp-image-3380\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-777.png 684w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-777-300x266.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-777-200x177.png 200w\" sizes=\"auto, (max-width: 684px) 100vw, 684px\" \/><\/figure>\n\n\n\n<p>Get the Public IP address of the Windows 2016 virtual machine.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"358\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-778-1024x358.png\" alt=\"\" class=\"wp-image-3381\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-778-1024x358.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-778-300x105.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-778-768x268.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-778-200x70.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-778.png 1454w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Download RDP file.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"899\" height=\"556\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-779.png\" alt=\"\" class=\"wp-image-3382\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-779.png 899w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-779-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-779-768x475.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-779-200x124.png 200w\" sizes=\"auto, (max-width: 899px) 100vw, 899px\" \/><\/figure>\n\n\n\n<p> <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"444\" height=\"311\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-781.png\" alt=\"\" class=\"wp-image-3384\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-781.png 444w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-781-300x210.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-781-200x140.png 200w\" sizes=\"auto, (max-width: 444px) 100vw, 444px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"383\" height=\"387\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-782.png\" alt=\"\" class=\"wp-image-3385\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-782.png 383w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-782-297x300.png 297w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-782-198x200.png 198w\" sizes=\"auto, (max-width: 383px) 100vw, 383px\" \/><figcaption>Disable Windows Firewall, and ping the IP address of Palo Alto LAN subnets <\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"840\" height=\"491\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-783.png\" alt=\"\" class=\"wp-image-3386\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-783.png 840w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-783-300x175.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-783-768x449.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-783-200x117.png 200w\" sizes=\"auto, (max-width: 840px) 100vw, 840px\" \/><\/figure>\n\n\n\n<p>Back to VPN2S, we can see the VPN status connection is &#8220;Connected&#8221;.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"371\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-784-1024x371.png\" alt=\"\" class=\"wp-image-3387\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-784-1024x371.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-784-300x109.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-784-768x278.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-784-200x73.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-784.png 1161w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Microsoft Azure seems to not support many customer devices as Amazon AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"310\" height=\"297\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-785.png\" alt=\"\" class=\"wp-image-3388\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-785.png 310w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-785-300x287.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-785-200x192.png 200w\" sizes=\"auto, (max-width: 310px) 100vw, 310px\" \/><\/figure>\n\n\n\n<p>On Kali machine, pings Windows 2016 VM on Azure.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"828\" height=\"460\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-786.png\" alt=\"\" class=\"wp-image-3389\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-786.png 828w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-786-300x167.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-786-768x427.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-786-200x111.png 200w\" sizes=\"auto, (max-width: 828px) 100vw, 828px\" \/><\/figure>\n\n\n\n<p>The IPSEC VPN site-to-site tunnel is up as well in Palo Alto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"927\" height=\"436\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-787.png\" alt=\"\" class=\"wp-image-3390\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-787.png 927w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-787-300x141.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-787-768x361.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-787-200x94.png 200w\" sizes=\"auto, (max-width: 927px) 100vw, 927px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"741\" height=\"356\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-788.png\" alt=\"\" class=\"wp-image-3391\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-788.png 741w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-788-300x144.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/04\/image-788-200x96.png 200w\" sizes=\"auto, (max-width: 741px) 100vw, 741px\" \/><\/figure>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is a diagram that I have used for the lab. Create a new virtual network is Azure-PA. Change default network to PrivateSubnet is 10.0.1.0. A subnet address range is 10.0.1.0\/24 Click Create. Create a new subnet. A subnet address range is 10.0.0.0\/24 Go to &#8220;Virtual network gateway&#8221; to create a new virtual network gateway. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,21],"tags":[20,18],"class_list":["post-3338","post","type-post","status-publish","format-standard","hentry","category-cloud","category-palo-alto","tag-cloud","tag-palo-alto"],"_links":{"self":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3338","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3338"}],"version-history":[{"count":5,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3338\/revisions"}],"predecessor-version":[{"id":3752,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/3338\/revisions\/3752"}],"wp:attachment":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3338"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3338"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3338"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}