Skip to content

Latest commit

 

History

History
55 lines (39 loc) · 1.68 KB

File metadata and controls

55 lines (39 loc) · 1.68 KB

SOLUTION: connect on-prem and hub with a Site-to-Site IPSec connection

Pre-requisites

In order to apply this solution you have to deploy hub and on-premises playgrounds.

Solution

In order to make this connection, you have to create 2 connections one from on-prem to cloud and another from cloud to onprem.

ipsec schema

create Local Network Gateways

create the following gateways

Name IP Address Address Space Region
cloud-net (hub-gateway-virtualip) 10.0.0.0/8 West Europe
onprem-net (onprem-gateway-virtualip) 192.168.0.0/16 France Central

connection onprem-to-cloud

Open on-prem-gateway, go to Connections and add the following object

  • Connection Name: onprem-to-cloud
  • Type: Site-to-Site (IPsec)
  • virtual Network Gateway: on-prem-gateway
  • Local Network Gateway: cloud-net
  • Shared Key: password.123
  • IKE: IKEv2

connection cloud-to-onprem

Open lab-gateway, go to Connections and add the following object

  • Connection Name: cloud-to-onprem
  • Type: Site-to-Site (IPsec)
  • virtual Network Gateway: lab-gateway
  • Local Network Gateway: onprem-net
  • Shared Key: password.123
  • IKE: IKEv2

after few minutes, you will see, on on-prem-gateway connections:

Name Status Connection Type Peer
onprem-to-cloud connected Site-to-Site (IPsec) cloud-net

and on lab-gateway connections:

Name Status Connection Type Peer
cloud-to-onprem connected Site-to-Site (IPsec) onprem-net

Test solution

Via bastion go to W10onprem (192.168.1.4) and open a RDP connection to hub-vm-01 (10.12.1.4).

Do the same test also in the opposite direction.