Cannot establish IPSec Tunnel between remote site and NSv

Jakezxz1

Hello,

I am using a Cradlepoint cellular router and I am trying to establish a IPSec VPN Tunnel between it and my virtual sonicwall instance inside of azure.

I created the VM using the useful marketplace tool and got it spun up very quickly.

I've configured IPSec tunnels between Cradlepoint routers and sonicwalls before, so I'm comfortable with the process, except this appears to be different.

I have my NSG rules in place to allow traffic on ports 500 and 4500 through - I can see traffic hit the NSv via pcap but the tunnel fails to establish on Phase 2.

I do not have an Azure virtual gateway, is this required?

Please assist where possible, I can share anything you require.

Jakezxz1

Just to be clear this is for the NSv 270

Ajishlal

@Jakezxz1

allow traffic on ports 50, 500 and 4500.

Follow the below KB for NSv (Azure) site to site VPN.

https://www.sonicwall.com/support/knowledge-base/how-can-i-configure-a-vpn-between-a-sonicwall-firewall-and-microsoft-azure/170505320011694/

Jakezxz1

https://community.sonicwall.com/technology-and-support/discussion/comment/18165#Comment_18165

Thanks friend - To be clear however, in case this article is not relevant - I have my NSv - Sonicwall VIRTUAL firewall hosted INSIDE Azure and I want to connect to it FROM the outside world.

I really don't want to setup a virtual gateway to do this since surely the entire point of the Sonicwall is to be the headend itself, no?