For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

BIG-IP to Azure Dynamic IPsec Tunneling

In one of my previous posts we took a look at configuring the BIG-IP to act as a site-to-site VPN tunnel endpoint for connecting on-premises environments with Azure.  At the time the BIG-IP only supp...
Published Dec 16, 2015
Version 1.0
BIG-IP
cloud
deployment
ipsec
LTM
microsoft
microsoft azure
MaaS_170765's avatar
MaaS_170765
Icon for Nimbostratus rankNimbostratus
Feb 21, 2016
Hi Greg, thanks for your great post. Does the IP address assigned to the LTM have to be publicly routable, or can it be a private IP that is behind a NAT device? I also read your previous post on policy-based IPsec VPNs using the LTM to connect to Azure, but I am limited in that my LTM is behind a NAT (and currently running version 11.6 for that matter, so I believe I'm limited to policy-based VPN until I upgrade to 12.x). Is there a way to use NAT Traversal and configure a LTM that is behind a NAT to create an IPsec VPN with Azure?