route to azure cloud through vpn

[waynedcam]

Hi all,

I'll just start by saying that my experience with Openvpn is limited to installing and configuring for our traveling sales force to access our network. So please be patient with me.

My company has a custom application that accesses Azure Gov Cloud for file storage. Our sales force is needing to demo this software to clients, via our Verizon aircards. Problem is, Verizon does not allow SMB or port 445. We even tried having them assign a static IP to one of our aircards, and it still does not work.

The only way we can get it to work is by adding

Code: Select all

redirect-gateway def1

to the Openvpn client config file.

However, we don't want ALL traffic to go through the VPN, only the Azure traffic and access to our LAN. Other web traffic should continue to go directly out the wireless air cards internet

Can someone clue me in on how to do that?
Can we wildcard the DNS name or do we have to use IP addresses?
Can you give me an example of what it should look like?

Any help would be greatly appreciated.

Thanks, Wayne

[fdisk]

Hello Wayne,

ip and route are looking up dns only once while fired up. So this means you cannot use dns wildcards.

I think your best chances are to route every IP ranges related to Azure. Just google for "azure ip ranges" for a complete and official list offered by MS. But keep in mind that there are quite a lot and the list might change now and than.
Then just create an up/down script with your desired ip route commands...