Oriental Solaire: the new ERP pilot is unreachable from the Oujda head office

Oriental Solaire, a solar power plant installer based in Oujda (sites in Bouarfa and Nador), has a hub-and-spoke Azure architecture: the hub network vnet-hub (10.50.0.0/16) holds the VPN gateway vgw-hub connected to the head office (192.168.10.0/24). Two existing spokes, vnet-spoke-web and vnet-spoke-bi, have been reachable from the head office for a year.

On Friday, a consultant created the spoke vnet-spoke-erp (10.52.0.0/16) with the VM vm-erp-pilote (10.52.1.4) and connected it to the hub by peering, “like the others”. The head office firewall already sends all of 10.0.0.0/8 into the tunnel.

This morning, the 15 pilot users (accounting and purchasing) get a timeout on https://erp-pilote.orientalsolaire.ma (10.52.1.4). It is only a pilot, but the training session is scheduled for 11:00. You are on your workstation with the Azure CLI signed in.