Super helpful and straightforward tutorial. Much clearer than some of the others I've seen.

@AzureTrainingSeries

2 жыл бұрын

Glad it was helpful!

You are a life saver. I was missing the private endpoint portion to connect to the shares. Thank you for this.

@AzureTrainingSeries

Жыл бұрын

Glad it was helpful!

What a wonderfully simple explaination of this complicated process. 5 Stars!

@AzureTrainingSeries

3 жыл бұрын

Thank you so much. Glad it helped.

This video is a life-saver. We've been trying to do this for days and were finally able to after your tutorial. Thank you!

@AzureTrainingSeries

Жыл бұрын

Glad it helped! Thanks

I have to personally thank you as well. Thank you Aquila! This exactly what I needed to roll out.

@AzureTrainingSeries

4 жыл бұрын

Thank you so much for watching the video and appreciating my efforts. Those kind words of appreciation motivates me to create more such contents. Thank you again!!

This was amazing, keep up the great work!

Fantastic presentation. A million thanks.

Awesome!!! Worked perfectly! Major kudos!

@AzureTrainingSeries

4 жыл бұрын

Glad it helped!!! Thank you so much for watching and especially trying it out.

This is the best and simple way of learning.

thank you, well explained and it helped me solving the client vpn connection

@AzureTrainingSeries

3 жыл бұрын

You're welcome! Glad to hear that it helped

You're my personal hero. Thank you so much :-) Greetings vom Bavaria.

@AzureTrainingSeries

4 жыл бұрын

Wow, thank you so much! So glad to hear those kind words of appreciation.

excellent video. Great job. Thank you very much. Very proffesional !

@AzureTrainingSeries

3 жыл бұрын

Thank you very much! Glad you liked it! Those kind words of appreciation motivates me a lot.

Helped me a lot! Thank you very much!!

@AzureTrainingSeries

3 жыл бұрын

You're welcome! Glad it helped

Excellent video. Works great. Thank you.

@AzureTrainingSeries

4 жыл бұрын

Great to hear! Thank you so much.

Thank you so much this video helped me a lot!

@AzureTrainingSeries

2 жыл бұрын

Glad it helped!

Oh, you are a life saver. Thanks for this video!

@AzureTrainingSeries

2 жыл бұрын

Glad to hear it helped!

great video!

Thanks for making this video.

@AzureTrainingSeries

2 жыл бұрын

Glad it was helpful!

Thanks a lot, worked perfectly

@AzureTrainingSeries

3 жыл бұрын

Great to hear! Thanks

Saved my life many thanks!

@AzureTrainingSeries

4 жыл бұрын

Glad it helped! Thank you for watching.

Amazing video! Just a precision. Now in order to be detected the subnet created in the virtual network must be named "GatewaySubnet" without the 'W' being capitalized

@AzureTrainingSeries

2 жыл бұрын

Thank you so much, Marc. You are right. It must be 'GatewaySubnet'. Not sure where in the video I made that mistake. Can you point to the timeline where you see that problem? else I will have to go through the complete video :)

@ML-lg3hv

2 жыл бұрын

@@AzureTrainingSeries at 10:50! It’s not a mistake of yours. It’s Microsoft which changed it!

@AzureTrainingSeries

2 жыл бұрын

Got It! But even I should have written 'W' in small instead of Capital, as writing 'W' in the middle of the word does not make sense. Thank you again. It will help the viewers.

Thank you sir !

@AzureTrainingSeries

Жыл бұрын

Most welcome!

Thanks for this video man. It was really helpful. Do you have any content on how to set up this for use with Active Directory??? I am struggling with that part....MS docs are confusing and most guys on YT videos are not very thorough.

@AzureTrainingSeries

Жыл бұрын

I apologize as I really do not have any content that is readymade for this, but what actually is your use case and how do you intend to use it?

The option 'Private endpoint' is no longer in the same location as shown in your video. You can search for it via Home and then create it, etc. But I can't get it to work as you demonstrated.

excellent video, congratulations and thanks for this. I have a question, why use 3 vlans, I understand that all the services could live in one vlan. Maybe security policies?

@AzureTrainingSeries

Жыл бұрын

Hi SkoTy, First please accept my apologies. I was on a long vacation and was away from work. I hope you are asking about the three subnets? In case your response is yes, then the response is that one subnet is dedicatedly needed for virtual network gateway (VNG), so we need at least 2 subnets. For clarity I have create 3 subnets. Hope this is now clear.

i would love one made with Active Directory ntergration for the VPN gateway and the file share

@AzureTrainingSeries

2 жыл бұрын

Thanks a lot, Jorge for the idea. I will definitely make that one

hi sir, excellent i'm able to connect. can we apply folder based access like Read & Write permissions to O365 users

@AzureTrainingSeries

2 жыл бұрын

Hi Shyam, Its an excellent question. I have not tried that personally, but I guess if you have a hybrid scenario, where you have the Azure AD Sync with on-premises AD, you should be able to achieve this provided that you might need to assign permissions to the users in the Azure Storage under IAM. Please try once and let me know.

Superb Content! However I have one question.. Can we mount the azure file share on a non domain joined machine through ADDS credentials through point to site VPN?

@AzureTrainingSeries

Жыл бұрын

As far as I think, it is not possible.

Can anyone help me mount File share in VM ... My scenario is that I want to mount file share at the time of VM creation and make it persist(Sync if files deleted/updated/added from VM). The way I want is through Powershell DSC extension in the Azure VM portal or through UserData(but could not use powersheel in Vm to run the powershell command provided by fileshare).

Thank you so much! How do we create the certificate?

@AzureTrainingSeries

4 жыл бұрын

Hi Ed, I have created a separate video on how to create the P2S VPN Connection, where I have explained it. Below is the URL. kzread.info/dash/bejne/c5-cqsmLms_Fqbg.html I have mentioned the commands as well in the description of the above video for creating the self-signed certificates.

@AzureTrainingSeries

4 жыл бұрын

Use the below commands with the MakeCert utility. Root Certificate $cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature ` -Subject "CN=P2SRootCert" -KeyExportPolicy Exportable ` -HashAlgorithm sha256 -KeyLength 2048 ` -CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign Client Certificate New-SelfSignedCertificate -Type Custom -DnsName P2SChildCert -KeySpec Signature ` -Subject "CN=P2SChildCert" -KeyExportPolicy Exportable ` -HashAlgorithm sha256 -KeyLength 2048 ` -CertStoreLocation "Cert:\CurrentUser\My" ` -Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")

excellent video, how come my connection string looks slightly different. your username in the demo is azure\atcslsstoragefs but mine says localhost rather than Azure?

@AzureTrainingSeries

2 жыл бұрын

This is strange. What is the name of the storage account and file share in your configuration?

At 12:36, it looks like the portal has added a new prompt requiring one to select the availability zone. I assume it doesn't really matter which one I go with unless I need it to be redundant, right?

@AzureTrainingSeries

2 жыл бұрын

Absolutely! You are spot on....

Where is video to create self signed certificate?

Is there a way to use the fqdn of the storage account file share instead of using the private ip address?

@AzureTrainingSeries

2 жыл бұрын

As per my understanding, I have not seen the FQDN working. Need to check if there has been changes since the time this video was made.

Is it possible to get the FQDN to resolve to the private IP address when accessed through the VPN? or am I stuck using the private IP?

@AzureTrainingSeries

3 жыл бұрын

Yes, for that case, you might need to use a DNS Zone and map the FQDN to your private IP address

Can you use the Azure Active Directory for authentication or are you required to use the storage account user/password?

@AzureTrainingSeries

4 жыл бұрын

Hi Monty, thanks for watching. You need to use the storage account name as the user id (Azure\) and the key as the password. You cannot use the AAD account. Hope this helps.

Is it normal for a VNGateway to take forever to be deployed? o.O Oh, and thank you very much for such unambigous tutorial!

@AzureTrainingSeries

2 жыл бұрын

Not forever, but it does take a couple of minutes to get deployed. Actually it does not take much time, and by the way, thank you so much.

Is it possible to use ADDS authentication for private endpoint?

@AzureTrainingSeries

3 жыл бұрын

Yes, the authentication is possible for services/workloads using private endpoints

can we use basic gateway, Instead of Standard Azure Gateway

@AzureTrainingSeries

3 жыл бұрын

Hi Fardeen, What basic gateway are you referring to?

I was able to connect successfully, but google drive seem faster to setup than file sharing Azure

@AzureTrainingSeries

3 жыл бұрын

It all depends on your requirements as to what is needed for your deployment in a particular scenario.

I am trying to connect the virtual network gateway to my virtual network but is says it is in use? How can I tackle that?

@AzureTrainingSeries

3 жыл бұрын

Are you using the Gateway subnet to create the VNG? On which step does it say "it is in use"?

Once connected to the VPN via MacOS Catalina, how do I connect to the server/network drive?

@AzureTrainingSeries

4 жыл бұрын

Hello Ryan, have you already configured the private endpoint? In case no, then that is the first thing to be done. Please let me know the step until where you have already completed. There are two links that I found relevant to your questions. osxdaily.com/2010/09/20/map-a-network-drive-on-a-mac/ setapp.com/how-to/map-a-network-drive-on-mac

@ryanarnold6782

4 жыл бұрын

@@AzureTrainingSeries Do i need a separate private endpoint for the Mac connection as well as my previous windows 10 connection? I have already connected my windows PC to this network drive using VPN and Map Network Drive

@AzureTrainingSeries

4 жыл бұрын

No, you do not need an additional private endpoint. The previous end point will work. Did the link I shared with you not work? The problem is that I do not have the Mac OS to try and test that, but I can definitely guide you in case you can share the screen shots.I am in meetings throughout the day and screen share will not be possible, but I can definitely respond to your queries.

@AzureTrainingSeries

4 жыл бұрын

Hi Ryan, It seems that you are connecting to the URI instead of the IP address. Nothing else seems to be incorrect. Assuming that 10.0.0.4 is the private endpoint address, you should connect to \\10.0.0.4\fwdmotionsync.

@AzureTrainingSeries

4 жыл бұрын

Also, choose guest and not registered user because that is not a registered user in AD or in the subscription.

If you have enabled public access what is the point of using P2S VPN ? 😅

@AzureTrainingSeries

Жыл бұрын

There can be multiple different usages or practical scenarios for having such a configuration.

Anyone having issues with explorer crashing when not connected to azure vpn and then trying to open explorer to do other work?

@AzureTrainingSeries

Жыл бұрын

Hi Mark, This issue has never been reported earlier and even I have not faced such issue.

@MarkHense-hh1kp

Жыл бұрын

@@AzureTrainingSeries I setup the file share, setup the s2s, setup the p2s, mapped the drive to a laptop, installed azure vpn, then mapped the drive. worked great. Take pc home and dont join azure vpn and cannot use explorer at all. Working with windows and azure support

im gettting an error 83 with azure vpn client

@AzureTrainingSeries

2 жыл бұрын

Can you please copy-paste the complete error and the time in the video where you are getting error.

Very helpful video. If you are trying to connect to the vpn from a mac pay very close to what happens at: kzread.info/dash/bejne/aZ6m1MamkpOykrg.html You MUST select "IKEv2 and SSTP." The mac vpn config will expect that you are using IKEv2. Beat my head against the wall for a few days, thinking I had effed up the certs, when I really had not set the tunnel type config correctly.

Hi I am not able to connect to fileshare

@AzureTrainingSeries

4 жыл бұрын

Hello Madhu, What is the issue you are facing? Can you please elaborate?

@madhumatha7020

4 жыл бұрын

@@AzureTrainingSeries Hi I have installed vpn and connected to it successfully. But problem is when I am trying to acces fileshare with private ip it is saying "Windows cannot acces \\10.0.1.6\hotfolder"

@AzureTrainingSeries

4 жыл бұрын

@@madhumatha7020 Can you please let me know if the private endpoint was created to correctly point to the files within the storage account? Also, please confirm that while mounting, you are using the fileshare name and not the storage account name. Additionally, I hope you have a VPN connection via SSTP.

@madhumatha7020

4 жыл бұрын

@@AzureTrainingSeries Yes I have created private end point to the Storage account and Vpn connection via SSTP and mounting with private ip followed by fileshare name... And later user name I given as Azure/storage ame and key1 as password

@AzureTrainingSeries

4 жыл бұрын

I guess the problem is that you are giving the username as Azure/storage name. It should be a backward slash "\", and it should be followed by the file share name and not the storage account name. Can you share their individual names (Storage and Fileshare)

I unable to map network drive at 23:48 timeline and i got the error of "the folder could not be found". 🥲I noticed that when I copied the script from file share (after click "Connect" button), the username is showing as "localhost\". Is this changes will effect anything?