Azure multiple Public IP's

[stoeffel]

Hello together

I have an OPNsense instance in Azure with two Interfaces.
It's possible to setup working Firewall rules with inbound connections from the Internet on the primary interface "LANPublicIP", but not on the secondary interface. On the secondary interface I don't see any internet traffic arriving OPNsense. When I do a packet capture, sometimes I see the incoming ICMPv4 requests from the Internet on the secondary interface, but no answer is sent. I tried different rules and routing options, but nothing worked, I can't reach OPNsense on the public IP from the secondary interface.

Outbound NAT with policy based routing on the second interface "PublicIPOut" is working.

Anyone have an idea what could block the incoming traffic on the secondary interface?

Thanks for your help guys.

[stoeffel]

Hello Guys

For everyone else who is interested in solving this problem, because the Cloud is going to be important more and more, I found a solution now.

In Azure all interfaces are defined as LAN type. So if multiple Gateways are available, in the Firewall rule the outbound Gateway must be chosen manually in the advanced options, if the return traffic should not go through the default gateway.
See also the attached picture.