nat (inside,outside) 1 source static ONPREM-NET ONPREM-NET destination static AZURE-NET AZURE-NET Phase 1 NAT is configured to exclude the traffic to/from the endpoints. access-list AZURE-VPN-ACL extended permit ip object-group ONPREM-NET object-group AZURE-NET NAT We then configure the encryption domain, using the previously created object groups. Object-Groupsįirst we configure the object groups for encryption domain endpoints. Cisco ASAīelow provides the necessary ASA configuration. From there you will be presented with the required networking shortcuts. If the necessary shortcuts aren’t within your favorites menu, select ‘New > Networking’.

Gateways : The virtual/local network gateway previously created.From the favourites menu select Local Network Gateway.This step may confuse some, as though it is named Local Network Gateway, it represents the remote side (peer/endpoint). Public IP – Select ‘create new’ and then ok.Gateway subnets are only used for VPNs within Azure. This will be used by Azure to build a gateway subnet. Virtual Network – When you add the previously created Virtual Network it will provide you with a Gateway subnet range.From the favourites menu select Virtual network gateways.In this example we will use Ubuntu 14.04. From the favourites menu select Virtual machines.From the favourites menu select Virtual networks.NOTE Further information on Azure Virtual Networks and the different deployment models can be found here.Īlways make sure that your Azure resource has finished provisioning before proceeding with the next step. If you have already done this you can skip over these steps. In the following steps we will create a VNet, and subnet. Within Azure, the configuration of the VPN centres around Azure Virtual Networks. Detailsīefore we dive into the steps it is worth mentioning the versions and encryption domain used within this tutorial, Versions Azure Deployment Mode Within this article we will show you how to build a policy based site to site VPN between Microsoft Azure and a Cisco ASA firewall.

Want to become a certified Azure expert?.

Cisco asa basic setup