Deploy Packet Capture for Azure VPN Gateway

Introduction

We can capture the Azure VPN connection's network packets using VPN Gateway Packet Capture. We can select the multiple tunnel network packets using this VPN Gateway Packet Capture.

The packet capture data files are generated in PCAP format.

The Azure VPN Gateway packet capture requires the Azure Storage account, and we must create the SAS token to store the PCAP file.

In our previous article, we learned how to configure the Packet capture for the specific Virtual Machine's network traffic using Network Watcher.

This article teaches us how to capture the Azure VPN gateway's traffic using VPN Gateway Packet Capture.

Step 1. Create a Container in the Storage account, open the container, and click Shared Access Signature (SAS) under the Security + networking.

Shared access signature

Step 2. Select Blob under the Allowed services, Select Container under the Allowed resource types, and click Generate SAS and connection string.

Generate SAS and connecting string

Step 3. Copy the Blob service SAS URL.

Blob service SAS URL

Step 4. Click the VPN Gateway packet Capture under the Help.

VPN Gateway Packet capture

Step 5. Click the Start Packet Capture.

Start packet capture

 

Step 6. The maximum Capture file size is 500M, so we can choose the file Size.

The Max packet buffer size: The capture will only contain the contents of each packet truncated to this size.

We can specify the Source Subnet and the Destination Subnet.

We can set the Source and the Destination port.

Once the requirements are completed, you can click the Start Packet Capture.

Start packet capture

Step 7. Click the Stop Packet Capture to stop the packet capture.

Stop packet capture

Step 8. Paste the SAS URL and click Stop Packet Capture.

Step 9. Open the Container and download the pcap file to analyze the traffic.

Analysis traffic

Summary

This article taught us how to configure the VPN connection traffic using the Azure VPN Gateway packet capture. If you have any questions, feel free to ask under the comment box.


IFS R&D International (Private) Limited
IFS is a global enterprise software vendor providing solutions that help companies get better return