I've setup site to site VPN using RRAS services on Windows Server 2012 R2. Let's call this computer RRAS machine. RRAS machine has two network adapters. One is a private one (192.168.200.x) and other is the accessible from Internet but it is firewalled. Our network admin opened all the necessary ports and it works as Azure VPN gateway connects.
My on premises address space is correctly set and I can see it being routed when I do tracert from VM machines.
Gateway connects and I can see traffic between sites. From on premises RRAS machine I can access VMs without problems which initialized the VPN connection (and where RRAS is installed). I can ping and use RDP directly without any kind of problems.
What I can do from VM machines (connected to virtual network over VPN) is to access RRAS machine's other network adapter (which happen to be 192.168.200.33) but I can't access any other machines on 192.168.200.x network. It looks like the packets are not being routed.
So to recap. The problem I have is that I can't access other on premises computers but only one network adapter attached to RRAS machine.
What can I do to fix this? Does anyone have experience with setting up this kind of network?