Microsoft Azure Training

Shawn Ismailshawn@cloudranger.net

http://www.cloudranger.net

Shawn Ismail Cloud Architect

@shawnismail shawn@cloudranger.net

https://www.linkedin.com/in/shawnismail

http://www.2tolead.comhttp://www.cloudranger.net

Azure Virtual Networks - Part 6Point-to-Site VPN

Azure Virtual Networks - Part 6 – Point-to-Site VPN

Point-to-site VPN

User

User

User

User

User User User

Azure VNet

Azure Virtual Networks - Part 6 – Point-to-Site VPN

• Individual client machines connect to Azure VNET with traditional VPN client • Utilizes SSTP (Secure Socket Tunnel Protocol)• Users certificate authentication between client computers and VNets• Individually configured; VPN client installed on client computer• 128 clients per VNet• Requires Dynamically Routed Gateway• Gateway bandwidth is 80 Mbps

Azure Virtual Networks - Part 6 – Point-to-Site VPN

Sequence of steps top establish a point-to-site VPN1. Create a VNET with p-2-s connectivity enabled from Management Portal 2. Create a Network Gateway - From Management portal or PowerShell3. Create self-signed Root certificate4. Create self-signed client cert from Root certificate5. Export client certificate from the Certificate Store6. Upload root authentication certificate to Azure7. Install the client certificate on the client machine to authenticate to the VNET8. Install Client VPN package – Download from Azure Portal9. Establish VPN and verify connectivity

Azure Virtual Networks - Part 6 – Point-to-Site VPN

Makecert

Create self-signed Root certificatemakecert -sky exchange -r -n "CN=rangerP2SRoot" -pe -a

sha1 -len 2048 -ss My .\rangerP2SRoot.cerCreate self-signed client cert from Root certificate

makecert –sky exchange-n "CN=rangerP2SClient" -pe -m 96 -ss My -in "rangerP2SRoot" -is My -a sha1

Azure Virtual Networks - Part 6Point-to-Site VPN

Training Site: http://www.cloudranger.net/azure-training

YouTube: https://www.youtube.com/c/CloudrangerNetwork

Twitter : @shawnismail

Email : shawn@cloudranger.net

LinkedIn: https://www.linkedin.com/in/shawnismail

http://www.2tolead.comhttp://www.cloudranger.net