Hello,

Since Azure VPN defaults to route-based VPN where it uses VTI feature but mikrotic dont support it.
How do you configure site to site VPN connection to onpremise site? Does it require combination of BGP and/or GRE Tunnel?

For instance:

Local Range: 192.168.88.0/24
Azure Range: 10.0.0.0/23

Can you also recommend the best setup ? For instance, when creating a connection, there is an option to define custom "IPsec/ IKE policy" and/or use Policy based traffic selector.

Thanks,
Mark

Hi, there are plenty of guides online. Here are some examples:

- Azure VPN Gateway and Mikrotik IPSEC/IKE Configuration
- MikroTik site-to-site IPsec VPN connection to Azure Resource Manager based gateway
- Azure VPN [SOLVED]

Youtube:
- Easy IPSEC Site-To-Site VPN Guide, MikroTik ROSv7

Microsoft:
- Microsoft - Connect Azure Stack Hub to Azure using VPN
- Microsoft - Tutorial: Create a site-to-site VPN connection in the Azure portal

@royalknight have you found any success? I've tried multiple guides to no avail.

I just finished setting up a route based Azure VPN Gateway (SKU VpnGw2AZ Gateway type VPN - VPN type Route-based) with a CCR1016 on v6.49.10. It is now working perfectly but there were many bad guides or incomplete guides.

What issues are you having, and can you post cfg? (remove sensitive)

I just finished setting up a route based Azure VPN Gateway (SKU VpnGw2AZ Gateway type VPN - VPN type Route-based) with a CCR1016 on v6.49.10. It is now working perfectly but there were many bad guides or incomplete guides.

What issues are you having, and can you post cfg? (remove sensitive)

we have site2site kind of working, but there are issues, I've created a separate thread regarding it: viewtopic.php?p=1071226#p1071226

edit: I second that there were a lot of incomplete/poor guides, none in the first response was particularly helpful, so to give credit we had most success with this one so far: https://cloudtips.nl/configuring-azure- ... b5ed0bea6e