Azure VPN S2S IPSEC issue

Hey Javier Reyes 

Are the Phase 1 and Phase 2 IPsec encryption algorithms for both sides of the tunnel matching?

Also ensure your Phase 1 key life is larger than Phase 2.

Hi Javier,

Your issue is with the local/remote networks not matching what Azure expects.

Check the Azure side, it seems to have configuration issues. 

Hi FloSupport,

I set the vpn following this instrucctions: https://community.sophos.com/kb/en-us/127546

This is the ipsec policie that I set, check the images attached:

Hi MasterRoshi,

That's what I though but both subnets are set at the azure local gateway.

Regards.

Can we see the screenshots of the VPN configuration on the Azure side?

Hi MasterRoshi,

There you have:

Azure Virtual Gateway

Connections

Azure Local gateway configuration

Can we see the local network gateway/Remote gateway part of the configuration? 

Also above looks like you showed the virtual network gateway not the local one. Please find the object in your tunnel configuration like in the screenshot above and then open that one.

Also screenshots of the local/remote networks on the XG will help as well. 

Hi,

I guess I found my mistake but I'm not sure, what I'm want to do is connect two onpremises subnets in one site, against one remote subnet (Azure) and I'm using VPN type Route based but basic (legacy) sku. Is it possible with basic sku?

May I use policy based instead of Route based with Sophos?

Regards

This scenario you explained should be possible with route based VPN on the Azure side. 

Azure themselves state they do not really "support" policy based, so its up to you.