IKEv2 VPN between Microsoft Azure and Vigor Router

This article introduces how to set up IPsec tunnel between Microsoft Azure Server and Vigor Router in Dynamic Routing mode. The network topology is illustrated below.

Microsoft Azure Server Setup

1. Create Virtual Networks by clicking Virtual Networks under All services >> NETWORKING, or search virtual networks.

2. Click Add to create Virtual networks then enter the necessary settings:

Enter Name
Enter Address Space, e.g. 10.0.0.0/16
Select "Create" New for Source Group
Select a Location close to your router
Leave Subnet settings as default (Azure will create the Subnet automatically then)
Click Create

3. Create Virtual Network Gateways by clicking Virtual network gateways under All services >> NETWORKING. In this step, Azure will allocate a public IP for VPN service.

4. Click Add to create Virtual network gateway then enter the necessary settings:

Enter Name
Select "VPN" for Gateway type
Select "Route-Based" for VPN type
Select "VpnGw1" for SKU
Select VNet1 for Virtual Network (VNet1 is the virtual network we created in step1)
Select "Create New" for Public IP and enter any IP. (Not sure why Azure requests to enter an IP address)
Click Create

5. It may take some time for Azure to arrange the public IP for VPN Network Gateway. After it finishes, we will see the public IP on the same page.

6. Create Local Network Gateway on Azure. We need to input Vigor Router’s Internet IP and its local network in this step, and Vigor Router must connect to the Internet directly, cannot behind a NAT device. Click Add to create Local network gateway then enter the necessary settings:

Enter Name
Enter the WAN IP address of Vigor Router at IP Address
Enter the LAN network of Vigor Router at Address space, in this example it's 192.168.8.0/24.
Click "Use Existing" for Resource group and select VNet.
Click Create

7. Wait for a few minutes, and we will see the Local Network Gateway profile created on the same page. Click Connections for configuring the VPN connection between Azure to Vigor Router.

8. Create VPN connection in Azure and enter the necessary settings:

Enter Name
Connection type is fixed to Site-to-Site (IPsec)
Select Virtual Gateway as the Azure VPN Public IP we created in step 3.
Select Local Network Gateway which is the remote VPN router’s Public IP and network we created in step 5.
Enter Shared Key (PSK)
Select VNet for Resource Group
Click OK