If you have any difficulties with connection then delete and re-create the Ubiquiti USG side first (those two check boxes at the bottom of the Advanced Options will check themselves again, but donРІР‚в„ўt be fooled by this quirk in the software). Give the connection a name, choose РІР‚СљSite-to-Site VPNРІР‚Сњ as the Purpose, choose РІР‚СљIPSec VPNРІР‚Сњ as the VPN Type, choose to Enable this Site-to-Site VPN, add the Azure subnet under Remote Subnets, get the newly created Virtual Network Gateway IP address from Azure for the Peer IP, enter the on-premise external IP address for Local WAN IP, enter the same shared key as used in the Azure VPN Connection for the Pre-Shared Key, choose РІР‚СљAzure Dynamic RoutingРІР‚Сњ as the IPSec Profile, expand Advanced Options, leave Key Exchange Version, Encryption, Hash & DH Group as default and uncheck the PFS & Dynamic Routing boxes.Click on Networks then on the РІР‚СљCreate New NetworkРІР‚Сњ button.Click on the Settings gears down on the bottom left side of the portal.Choose the Current Site from the top right hand side of the portal.This is a fairly simple process but it has to be precise: This completes the setup of the Azure side of the VPN tunnel. Choose the newly created Virtual Network Gateway, choose the newly created Local Network Gateway, give the connection a name, specify a shared key and click the РІР‚СљOKРІР‚Сњ button.On the summary screen click on the РІР‚СљOKРІР‚Сњ button to create the connection. Choose РІР‚СљSite-to-site (IPSec)РІР‚Сњ as the connection type, leave the remaining values as their defaults and then click the РІР‚СљOKРІР‚Сњ button.

Click on the РІР‚Сљ+РІР‚Сњ icon at the top left hand side of the Resource Manager, then search for РІР‚СљConnectionРІР‚Сњ and click on the РІР‚СљCreateРІР‚Сњ button.

This will create the tunnel from Azure to the on-premise site:

Give the Local Network Gateway a name, specify the external IP address of the on-premise site, specify the on-premise address space (subnet), leave the remaining values as their defaults and then click the РІР‚СљCreateРІР‚Сњ button.

Click on the РІР‚Сљ+РІР‚Сњ icon at the top left hand side of the Resource Manager, then search for РІР‚СљLocal Network GatewayРІР‚Сњ and click on the РІР‚СљCreateРІР‚Сњ button.

This is a reference to your on-premise network so that subnets can pass traffic:

(Please note the reminder that this takes 45 minutes to create!) Give the Virtual Network Gateway a name, leave Gateway & VPN type the defaults, choose or create a local network (not covered here), choose or create a Public IP Address, leave the remaining values as their defaults and then click the РІР‚СљCreateРІР‚Сњ button.Click on the РІР‚Сљ+РІР‚Сњ icon at the top left hand side of the Resource Manager, then search for РІР‚СљVirtual Network GatewayРІР‚Сњ and click on the РІР‚СљCreateРІР‚Сњ button.This part takes the longest, so it should be done first: It will be using the following parameters: This tutorial will go into detail about the creation of this tunnel starting with the Microsoft Azure side first using Resource Manager.

I helped them setup Azure to Unifi USG IPSec VPN to connect their headquarters to the hosted RemoteApps server. Had another tech firm that needed some Tier 3 assistance as they were having trouble with their VPN connection.

Azure point to site vpn auto connect