{"id":1697,"date":"2013-05-16T12:18:43","date_gmt":"2013-05-16T16:18:43","guid":{"rendered":"http:\/\/www.bhargavs.com\/?p=641"},"modified":"2013-05-16T12:18:43","modified_gmt":"2013-05-16T16:18:43","slug":"azure-vpn-behind-nat-on-the-cheap","status":"publish","type":"post","link":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/","title":{"rendered":"Azure VPN behind NAT on the cheap"},"content":{"rendered":"<p>I have been working on <a href=\"http:\/\/www.windowsazure.com\/en-us\/home\/scenarios\/infrastructure-services\/\" target=\"_blank\" rel=\"noopener noreferrer\">Azure Infrastructure Services<\/a> since it was in preview release. One of the requirements I was working with was hybrid scenario where VPN between on-premises servers and Azure VMs was essential. Since I was doing all the required testing in my lab at home office, I did not have infrastructure you would usually find in corporate datacenters. I didn\u2019t have a need to buy expensive routers and servers for testing I was doing.<\/p>\n<p>Looking at <a href=\"http:\/\/msdn.microsoft.com\/en-us\/library\/windowsazure\/jj156075.aspx\" target=\"_blank\" rel=\"noopener noreferrer\">Azure VPN requirements<\/a>, you will notice that Windows RRAS is one of the known compatible device. However, all references I found talks about Internet interface of RRAS server must be a public IP address and can\u2019t be behind a NAT router. I did try anyway only to fail.<\/p>\n<p>So I turned my attention to other VPN devices. Again referring to requirements, it was important that the VPN device supports not only Site-to-Site VPN, but must also support AES encryption. I found <a href=\"http:\/\/www.netgear.com\/business\/products\/security\/wired-vpn-firewalls\/fvs318.aspx#\" target=\"_blank\" rel=\"noopener noreferrer\">Netgear FVS318<\/a> which was about the cheapest alternative I can find that seem to have met all Azure listed VPN requirements. It didn\u2019t have to be supported device in my case. So I just have to try it and see if it works.<\/p>\n<p>Let\u2019s start with my network. Here\u2019s what it looks like:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image16.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb16.png\" width=\"244\" height=\"184\"\/><\/a><\/p>\n<p>Lot of home or even small business networks look something similar to mine. You have a single router provided by cable provider or ISP. It usually is basic NAT router with single public IP on external interface and private IPs on internal interface. It is important to mention that to keep it less complex, I did get two static IP addresses from my ISP. One for all home traffic going to internet which will be using one IP and second IP will be dedicated to Azure VPN. The problem of single NAT router still remained as the router wasn\u2019t advanced enterprise class router and didn\u2019t have capability to allow public IP addresses on the \u201cinside\u201d. The only option I had was to use VPN device on the 192.168.2.x range and have 1:1 NAT using dedicated second public IP.<\/p>\n<p>My Lab running in Hyper-V was further isolated on its own subnet so I used new Netgear device to connect the lab for purpose of VPN.In essence, here\u2019s what my network looks like:<\/p>\n<blockquote>\n<p>Public IP \u2013 ISP router \u2013 192.168.2.x \u2013 Netgear \u2013 192.168.101.x<\/p>\n<\/blockquote>\n<p>Now that basics are out of the way, let\u2019s look at how I went about configuring it.<\/p>\n<p>First of all, I created a local network in Azure portal, where I defined VPN Device IP (my public IP) and my VM network (ignore \/16 subnet mask, I did it intentionally instead of \/24):<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image17.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb17.png\" width=\"244\" height=\"176\"\/><\/a><\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image18.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb18.png\" width=\"244\" height=\"176\"\/><\/a><\/p>\n<p>At this point, I needed patience as Azure created gateway for me. When complete, the network dashboard looks similar to this:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image19.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb19.png\" width=\"244\" height=\"101\"\/><\/a><\/p>\n<p>Before I can setup VPN device, I needed to gather a bit more information. I needed shared key and just because I wasn\u2019t familiar with all needed settings, I also chose to download VPN device script even though it wasn\u2019t going to be for my device.<\/p>\n<p>To get the key, click \u2018Manage key\u2019 icon at the bottom of network dashboard page I mentioned above. You can simply copy the key to clipboard for configuration later.<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image20.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb20.png\" width=\"233\" height=\"244\"\/><\/a><\/p>\n<p>For VPN script, the link is to the right on the same page:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image21.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb21.png\" width=\"244\" height=\"151\"\/><\/a><\/p>\n<p>I now had needed information to setup my VPN device. Let\u2019s head over to Netgear configuration user interface. First thing I had to do was define two interfaces. the \u201cinternet\u201d interface was on 192.168.2.x network, and since it\u2019s my home network private IP addresses, I assigned a static IP from that range. Basic settings looked something like this:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image22.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb22.png\" width=\"244\" height=\"197\"\/><\/a><\/p>\n<p>On the \u201cLAN\u201d interface of router, I assigned IP address from my Hyper-V VM Network 192.168.101.x. I didn\u2019t need DHCP on that network so I disabled it. The LAN Setup page looks something like this:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image23.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb23.png\" width=\"244\" height=\"196\"\/><\/a><\/p>\n<p>At this point, I am ready to setup VPN. There is a VPN Wizard option which I think was handy so I chose to go with it and change what I need after wizard sets up basics. I don\u2019t doubt your smarts so I am going to skip over obvious screens and show you relevant screens only. First important one is where it asks for connection name and shared key. I chose to name the connection obligatory \u201cAzure\u201d. OBviously I won\u2019t show you my shared key but I did paste it in the shared key field on the page. LAstly, make sure you select VPN Gateway for tunnel endpoint:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image24.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb24.png\" width=\"244\" height=\"76\"\/><\/a><\/p>\n<p>Next one is IP address of Azure gateway. Specify the IP of the Azure gateway obtained from Azure portal:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image25.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb25.png\" width=\"244\" height=\"48\"\/><\/a><\/p>\n<p>Last step in wizard is to specify IP address range of Azure VMs (it\u2019s not 0.0.0.0 for me, it\u2019s intentional that I\u2019m not showing you my IP range):<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image26.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb26.png\" width=\"244\" height=\"54\"\/><\/a><\/p>\n<p>At this point the wizard is done. We need to change settings to meet Azure requirements. So I headed over to \u201cVPN Policies\u201d section and clicked edit for Azure policy I just created. Looking at VPN device script I had downloaded, I noticed that required encryption was AES, however, VPN wizard on FVS318 had defaulted to 3DES. So I went ahead and changed it to AES-128:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image27.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb27.png\" width=\"244\" height=\"69\"\/><\/a><\/p>\n<p>While there, I noticed that SA Lifetime was required 28800 seconds but was set to 0 bytes. Looking at the script, it was 102400000 so I changed it to match:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image28.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb28.png\" width=\"244\" height=\"23\"\/><\/a><\/p>\n<p>Next I headed over to IKE policies. Here I had to change two items. Encryption was set to 3DES, I needed to set it to AES-128. SA Lifetime was 86400 secs here so I changed it to required 28800:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image29.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb29.png\" width=\"244\" height=\"66\"\/><\/a><\/p>\n<p>The only setting from script that I couldn\u2019t find option for was to set tcpmss to 1350. I chose to leave it alone instead of changing MTU on internet interface.<\/p>\n<p>Now that the configuration is done on NetGear device, I headed over to my ISP router and configured 1:1 NAT for my dedicated IP that I had configured in Azure portal as my VPN gateway of local network. I made sure that 1:1 NAT was forwarding all traffic intended for this IP to NetGear FVS318.<\/p>\n<p>Looked like everything was configured ok and VPN should connect. So I headed over to NetGear and pulled VPN Log, which shoed me VPN was connected:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image30.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb30.png\" width=\"244\" height=\"111\"\/><\/a><\/p>\n<p>I then looked at Azure portal and it showed me that VPN connection was established:<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image31.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb31.png\" width=\"244\" height=\"61\"\/><\/a><\/p>\n<p>The last thing I wanted to do to make sure everything was working as expected was to open RDP session from my Hyper-V VM to VM in Azure. All I had to do was pull up RDP client and use the IP address from my Azure VM. Everything worked as expected. Couldn\u2019t be happier but why stop there? So I decided to change gateway in Azure to my shared IP (to see if it would have worked for you guys who don\u2019t have dedicated IP to spare). I then created port forwarding rule on my ISP router that included UDP ports 500 and 4500, protocols AH and ESP. I already have prebuilt rule in my router so depending on your ISP router, YMMV.<\/p>\n<p><a href=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image32.png\"><img loading=\"lazy\" decoding=\"async\" title=\"image\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; margin: 0px; border-left: 0px; display: inline; padding-right: 0px\" border=\"0\" alt=\"image\" src=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb32.png\" width=\"244\" height=\"37\"\/><\/a><\/p>\n<p>And sure enough, this setup worked as well. So as long as you have UDP 500, 4500 and protocols ESP and AH forwarded to your VPN device, it seems it should work. Now I can\u2019t tell what it will break\u2026 for example, if you are using your laptop at home to connect to work which might be using same protocols\u2026 worth thinking about and testing. I don\u2019t have resources to test that scenario so I will leave you with two options, take a change and use shared IP NAT or dedicate an IP and use 1:1 NAT. it worked for me either way. Can\u2019t guarantee it will for you but you now have hope since I was able to do it!<\/p>\n<p>Cheers.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I have been working on Azure Infrastructure Services since it was in preview release. One of the requirements I was working with was hybrid scenario where VPN between on-premises servers [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pgc_sgb_lightbox_settings":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[38,6,41],"tags":[78,185,188,272],"class_list":["post-1697","post","type-post","status-publish","format-standard","hentry","category-azure","category-cloud","category-firewall","tag-azure","tag-nat","tag-netgear","tag-vpn"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Azure VPN behind NAT on the cheap - Bhargav&#039;s IT Playground<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Azure VPN behind NAT on the cheap - Bhargav&#039;s IT Playground\" \/>\n<meta property=\"og:description\" content=\"I have been working on Azure Infrastructure Services since it was in preview release. One of the requirements I was working with was hybrid scenario where VPN between on-premises servers [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/\" \/>\n<meta property=\"og:site_name\" content=\"Bhargav&#039;s IT Playground\" \/>\n<meta property=\"article:published_time\" content=\"2013-05-16T16:18:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb16.png\" \/>\n<meta name=\"author\" content=\"Bhargav\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Bhargav\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/\"},\"author\":{\"name\":\"Bhargav\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"headline\":\"Azure VPN behind NAT on the cheap\",\"datePublished\":\"2013-05-16T16:18:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/\"},\"wordCount\":1323,\"commentCount\":20,\"publisher\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"image\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/bhargavs.com\\\/wp-content\\\/uploads\\\/2013\\\/05\\\/image_thumb16.png\",\"keywords\":[\"Azure\",\"NAT\",\"NetGear\",\"VPN\"],\"articleSection\":[\"Azure\",\"Cloud\",\"Firewall\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/\",\"url\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/\",\"name\":\"Azure VPN behind NAT on the cheap - Bhargav&#039;s IT Playground\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/bhargavs.com\\\/wp-content\\\/uploads\\\/2013\\\/05\\\/image_thumb16.png\",\"datePublished\":\"2013-05-16T16:18:43+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/#primaryimage\",\"url\":\"https:\\\/\\\/bhargavs.com\\\/wp-content\\\/uploads\\\/2013\\\/05\\\/image_thumb16.png\",\"contentUrl\":\"https:\\\/\\\/bhargavs.com\\\/wp-content\\\/uploads\\\/2013\\\/05\\\/image_thumb16.png\",\"width\":244,\"height\":184},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/index.php\\\/2013\\\/05\\\/16\\\/azure-vpn-behind-nat-on-the-cheap\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/bhargavs.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Azure VPN behind NAT on the cheap\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#website\",\"url\":\"https:\\\/\\\/bhargavs.com\\\/\",\"name\":\"Bhargav's IT Playground\",\"description\":\"Passion for Technology. Power of Collaboration.\",\"publisher\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/bhargavs.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/28f6d8c9b29f3a879483d65fc2ab5e26\",\"name\":\"Bhargav\",\"logo\":{\"@id\":\"https:\\\/\\\/bhargavs.com\\\/#\\\/schema\\\/person\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/bhargavs.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Azure VPN behind NAT on the cheap - Bhargav&#039;s IT Playground","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/","og_locale":"en_US","og_type":"article","og_title":"Azure VPN behind NAT on the cheap - Bhargav&#039;s IT Playground","og_description":"I have been working on Azure Infrastructure Services since it was in preview release. One of the requirements I was working with was hybrid scenario where VPN between on-premises servers [&hellip;]","og_url":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/","og_site_name":"Bhargav&#039;s IT Playground","article_published_time":"2013-05-16T16:18:43+00:00","og_image":[{"url":"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb16.png","type":"","width":"","height":""}],"author":"Bhargav","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Bhargav","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/#article","isPartOf":{"@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/"},"author":{"name":"Bhargav","@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"headline":"Azure VPN behind NAT on the cheap","datePublished":"2013-05-16T16:18:43+00:00","mainEntityOfPage":{"@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/"},"wordCount":1323,"commentCount":20,"publisher":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"image":{"@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/#primaryimage"},"thumbnailUrl":"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb16.png","keywords":["Azure","NAT","NetGear","VPN"],"articleSection":["Azure","Cloud","Firewall"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/","url":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/","name":"Azure VPN behind NAT on the cheap - Bhargav&#039;s IT Playground","isPartOf":{"@id":"https:\/\/bhargavs.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/#primaryimage"},"image":{"@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/#primaryimage"},"thumbnailUrl":"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb16.png","datePublished":"2013-05-16T16:18:43+00:00","breadcrumb":{"@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/#primaryimage","url":"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb16.png","contentUrl":"https:\/\/bhargavs.com\/wp-content\/uploads\/2013\/05\/image_thumb16.png","width":244,"height":184},{"@type":"BreadcrumbList","@id":"https:\/\/bhargavs.com\/index.php\/2013\/05\/16\/azure-vpn-behind-nat-on-the-cheap\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/bhargavs.com\/"},{"@type":"ListItem","position":2,"name":"Azure VPN behind NAT on the cheap"}]},{"@type":"WebSite","@id":"https:\/\/bhargavs.com\/#website","url":"https:\/\/bhargavs.com\/","name":"Bhargav's IT Playground","description":"Passion for Technology. Power of Collaboration.","publisher":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/bhargavs.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/28f6d8c9b29f3a879483d65fc2ab5e26","name":"Bhargav","logo":{"@id":"https:\/\/bhargavs.com\/#\/schema\/person\/image\/"},"sameAs":["https:\/\/bhargavs.com"]}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":1699,"url":"https:\/\/bhargavs.com\/index.php\/2013\/08\/20\/introducing-loadmaster-for-windows-azure\/","url_meta":{"origin":1697,"position":0},"title":"Introducing LoadMaster for Windows Azure","author":"Bhargav","date":"August 20, 2013","format":false,"excerpt":"As an individual responsible for product research, it is part of my job to be on the lookout for developing trends and new opportunities where our products can deliver value. When I started looking at Windows Azure IaaS offering, it became obvious that we had great opportunity as Microsoft Partners\u2026","rel":"","context":"In &quot;Announcements&quot;","block_context":{"text":"Announcements","link":"https:\/\/bhargavs.com\/index.php\/category\/announcements\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3799,"url":"https:\/\/bhargavs.com\/index.php\/2017\/07\/24\/how-to-restore-files-and-folders-using-azure-backup\/","url_meta":{"origin":1697,"position":1},"title":"How to Restore Files and Folders using Azure Backup","author":"Bhargav","date":"July 24, 2017","format":"video","excerpt":"Previously, I showed you how to backup files and folders to Azure using Azure Backup. In this video, I'm going to show you how to restore files and folders from Azure using Azure Backup. \u00a0","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/bhargavs.com\/index.php\/category\/cloud\/azure\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1709,"url":"https:\/\/bhargavs.com\/index.php\/2017\/04\/25\/how-to-back-up-files-and-folders-using-azure-backup\/","url_meta":{"origin":1697,"position":2},"title":"How to Back Up Files and Folders using Azure Backup","author":"Bhargav","date":"April 25, 2017","format":"video","excerpt":"If a picture is worth thousand words, how about a video explaining how to configure Azure Recovery Services Vault and configure a File and Folder backup for a Windows machine using Azure Backup? Cheers!","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/bhargavs.com\/index.php\/category\/cloud\/azure\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":716,"url":"https:\/\/bhargavs.com\/index.php\/2014\/03\/13\/how-to-assign-static-ip-to-azure-vm\/","url_meta":{"origin":1697,"position":3},"title":"How to assign Static IP to Azure VM","author":"Bhargav","date":"March 13, 2014","format":false,"excerpt":"When you start working with Windows Azure IaaS offering, you quickly realize that the age old ways of dealing with infrastructure configuration immediately becomes invalid. Let me give you an example: when you setup a new server in your datacenter, one of the first things you do is acquire an\u2026","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/bhargavs.com\/index.php\/category\/cloud\/azure\/"},"img":{"alt_text":"image","src":"https:\/\/i0.wp.com\/bhargavs.com\/wp-content\/uploads\/2014\/03\/image_thumb.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":1238,"url":"https:\/\/bhargavs.com\/index.php\/2016\/05\/19\/how-to-move-your-wordpress-blog-to-azure-vm-part-1\/","url_meta":{"origin":1697,"position":4},"title":"How to move your WordPress blog to Azure VM &#8211; Part 1","author":"Bhargav","date":"May 19, 2016","format":false,"excerpt":"I wrote a series of articles on how to move your existing WordPress blog to Azure VM. This is part 1 of a 4 part series. Originally posted on KEMP Technologies blog: http:\/\/kemptechnologies.com\/blog. In this multipart series, we will look at how you can move your existing, self-hosted WordPress blog\u2026","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/bhargavs.com\/index.php\/category\/cloud\/azure\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1242,"url":"https:\/\/bhargavs.com\/index.php\/2016\/05\/20\/how-to-move-your-wordpress-blog-to-azure-vm-part-2\/","url_meta":{"origin":1697,"position":5},"title":"How to move your WordPress blog to Azure VM \u2013 Part 2","author":"Bhargav","date":"May 20, 2016","format":false,"excerpt":"I wrote a series of articles on how to move your existing WordPress blog to Azure VM. This is part 2 of a 4 part series. Originally posted on KEMP Technologies blog: http:\/\/kemptechnologies.com\/blog. Installing WordPress on Windows means installing all the required pre-requisites including PHP and MySQL and configuring IIS\u2026","rel":"","context":"In &quot;Azure&quot;","block_context":{"text":"Azure","link":"https:\/\/bhargavs.com\/index.php\/category\/cloud\/azure\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_shortlink":"https:\/\/wp.me\/pkROc-rn","_links":{"self":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts\/1697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/comments?post=1697"}],"version-history":[{"count":0,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/posts\/1697\/revisions"}],"wp:attachment":[{"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/media?parent=1697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/categories?post=1697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bhargavs.com\/index.php\/wp-json\/wp\/v2\/tags?post=1697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}