BIG-IP to Azure Dynamic IPsec Tunneling
Published Dec 17, 2015
Version 1.0Was this article helpful?
In step 1, the PFS needs to be set to none to match Azure default settings. Otherwise the Phase 2 tunnel doesn't renew after it reaches its lifetime. I've been fighting this the past few days and with F5 support discovered that is the setting that's needed.
You can have multiple tunnels on the same float IP or self IP.