Site to site vpn connection

What is Site to site vpn connection?

A site-to-site virtual private network (VPN) is a connection between two or more networks, such as a corporate network and a branch office network
In context of Azure, Site to site vpn connection is a cross-premises connectivity between on-premises network and Azure virtual network
Also known as S2S vpn connection
A site-to-site VPN is a permanent connection designed to function as an encrypted link between two networks

In the context of Azure Virtual Network, a local network gateway represents VPN device (hardware or software) in on-prmise local network
To set up a site-to-site VPN connection between an Azure virtual network and local network, local network gateway is required
There is no additional charge for creating local network gateways in Microsoft Azure

Need following information

Creating local network gateway in Azure portal

Creating a local network gateway for site to site vpn connection

Creating site-to-site vpn connection in Azure portal Step 1

Creating site-to-site vpn connection in Azure portal Step 2

Creating site-to-site vpn connection in Azure portal Step 3

Creating site-to-site vpn connection in Azure portal Step 4

Creating site-to-site vpn connection in Azure portal Step 5

After creating connection, we can download configuration script
To downlaod configuartion script, we need following information
- Device (VPN router) vendor
- Device Family
- Firmware version

Downloading configuration script for site to site vpn connection step 1

Downloading configuration script for site to site vpn connection step 2

Downloading configuration script for site to site vpn connection step 3

Site-to-Site connections to an on-premises network require a VPN device
VPN device is basically a VPN router
Requires
- A shared key: the same shared key that you specify when creating your Site-to-Site VPN connection)
- Public IP address of your virtual network gateway (select vpn gateway and see it’s public IP address)

How to configure on-premise VPN Router?

Configuration script might have placeholder parameters (there might not be any parameter if you provide Device vendor, family firmware version while downlaoding scritp)
- i.e. PARAMETER1
- Filiup placeholder parameters with actual values of router information
Go to control panel of router and use the script to configure the router

Links:

Checking site to site vpn connection status