Azure site-to- site VPN connections to the Vnet

Azure site-to- site VPN connections to the Vnet

A site-to- site connection is different from a point-to- point connection, and each configuration needs a specific venn type. If the two configurations new combined to the same Vnet, the VPN type must satisfy both connection requirements. In this case, deepening on whether you're working with the classic deployment mode or the rescue manager deployment model, there are two VPN types. The classic deployment model offered static routing gateways also known as policy based VPN. These encrypt and direct the data packets based on IPSec policies, through the IPSec tunnels, based on the configured combinations of address prefixes throughout the path. The policy here is defined as an access list in the device configuration of the VPN. The other type is the route-based VPN aka dynamic routing gateways, which use routes to route or forward the packets into their tunnel interfaces. These tunnels encrypt or decrepit the packet through the tunnels. The policy for a route-based ban is configured as a wildcard and hence, dynamic.