How to setup S2S IPsec tunnel with Azure
It is very unclear how to do it
Forum Discussion
michaelsaw
Cato Employee
Cato EmployeeHi Alman,
Have you reviewed this KB article from Azure: https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal ?
As Azure supports IKEv1 and IKEv2, here are 2 Cato KBs for easy reference:
https://support.catonetworks.com/hc/en-us/articles/4413273472145-Configuring-IPsec-IKEv1-Sites
https://support.catonetworks.com/hc/en-us/articles/4413265635473-Configuring-IPsec-IKEv2-Sites
Do share more details of IPSec connectivity configuration if you are have challenges, or reach out to you assigned Cato SE for assistance.
Thank you.
When creating a site, what is the site type?
What license type should it be?
Where is the license? Do I have to buy a license to configure S2S IPsec with Azure?
What is the native range?
I don't see any examples, just a plain explanation
- michaelsaw
Hi Aiman,
Site type would be based on site connectivity requirements, e.g. IPSec (based on CMA options).
LIcense type can be SASE or SSE.
LIcense can be purchased via our Cato Sales representatives.
The Native Range for the site is the IP range that you configured for each LAN interface when you created the site.
Here are links to share:
https://support.catonetworks.com/hc/en-us/articles/4413265633937-Working-with-Sites
https://support.catonetworks.com/hc/en-us/articles/4413280508433-Configuring-Network-Ranges-for-a-Site
You may also like to post the questions on Cato Knowledge AI Assistant, to get the answers.
Here is KB on Knowledge AI Assistant to share: https://support.catonetworks.com/hc/en-us/articles/24202009938077-Understanding-Cato-s-Knowledge-Base-AI-Assistant
Is there any Cato SE/representative assisting you on the questions currently, Aiman? ___
Thank you.