title: Connecting Site-to-Site VPN on Azure via RRAS Help - Connected, but only 1 way ping
body: <p>need some expert advice.</p>
  
  <p>I've set up a Site to Site VPN connection between Azure and my on premise setup by following the guides below.</p>
  
  <p>The Remote and Routing Access Server (RRAS) runs on top of a Windows Server 2012 VM.
  A FW sits infront of the Internet, and routes all the traffic of a given Public IP address to this RRAS server.</p>
  
  <p>The RRAS server has a ROUTE ADD setting added to direct 10.100.0.0/17 traffic to itself as the GW.</p>
  
  <p>A secondary VM maps this RRAS server as the GW.
  All connections worked, and the RRAS dialup is connected fine.</p>
  
  <p>Now, my VM HyperV-Local1 is able to ping 10.100.0.4, same for my RRAS server.
  But my VM-1 on Azure is unable to ping/access back to my on-premise servers.</p>
  
  <p><img src="https://i.stack.imgur.com/Ki5Mt.png" alt="Overall setup diagram"></p>
  
  <p><a href="http://clusteringformeremortals.com/2014/01/03/how-to-create-a-site-to-site-vpn-tunnel-to-the-windows-azure-cloud-using-a-window-server-2012-r2-routing-and-remote-access-rras-server/" rel="nofollow noreferrer">View RRAS Setup Guide 1</a>,
  <a href="http://fabriccontroller.net/blog/posts/reference-implementation-for-windows-azure-virtual-networks-software-based-site-to-site-vpn/" rel="nofollow noreferrer">View RRAS Setup Guide 2</a></p>