Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,681 questions
0 answers
BGP Path Decision
How we can identify to which path Azure will forward the traffic to the onprem if BGP enabled? Example in below pic which next hop azure will forward to subnet 10.101.0.0/16?
asked 2025-03-15T01:28:45.66+00:00
Handian Sudianto
5,776
Reputation points
asked 2025-03-15T01:28:45.66+00:00
Handian Sudianto
5,776
Reputation points
0 answers
BGP Routing Path
Active active mode in the VPN Gateway set to enabled, this mean Azure will have 2 BGP Peer IP and 2 VPN Public IP. Azure BGP Peer IP : 10.201.0.4 and 10.201.0.5 I also have 2 local connection from VGW to my onpremises using 2 different internet…
asked 2025-03-15T01:25:32.85+00:00
Handian Sudianto
5,776
Reputation points
asked 2025-03-15T01:25:32.85+00:00
Handian Sudianto
5,776
Reputation points
1 answer
S2S VPN Connection Custom IPsec policy with client disconnects and never re-establishes
We have a customer that is still using IKEv1 protocol and we are doing our best to accommodate. It is an old connection from years back and we've always had intermittent disconnects. The connection went down recently and we tried to get them to move to…
asked 2025-03-10T14:22:51.39+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(41.6, 64%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDB%3C/text%3E%3C/svg%3E)
David Boorman
0
Reputation points
commented 2025-03-14T03:24:58.1733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 82%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVV%3C/text%3E%3C/svg%3E)
Venkat V
780
Reputation points Microsoft External Staff
0 answers
How to upgrade Basic to Standard SKU public IP address for VPN in Azure?
I got a notice that the Basic SKU for public IPs would no longer be supported after September and that I would need to upgrade to the Standard SKU. The public IP that I'm using is for a site-to-site VPN. It won't let me replace the public IP. Do I need…
asked 2025-03-13T17:53:15.4366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 46%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECW%3C/text%3E%3C/svg%3E)
Carlton Whitmore
1
Reputation point
commented 2025-03-13T18:50:41.22+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 17%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERV%3C/text%3E%3C/svg%3E)
Rohith Vinnakota
3,160
Reputation points Microsoft External Staff
1 answer
Unexpected Route Inheritance in P2S VPN from S2S VPN
Description: We are experiencing an issue with Point-to-Site (P2S) VPN clients inheriting routes from the Site-to-Site (S2S) VPN connection. Our setup does not use BGP, so all routes are managed manually. However, despite explicitly blocking certain…
asked 2025-02-25T18:14:52.82+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 68%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EI%3C/text%3E%3C/svg%3E)
Ivan
0
Reputation points
commented 2025-03-13T18:06:09.46+00:00
Rohith Vinnakota
3,160
Reputation points Microsoft External Staff
1 answer
Azure VPN User access logs
How to get distinct O365 users list who have accessed Azure VPN
asked 2025-03-10T07:30:08.19+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 66%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3E3%3C/text%3E%3C/svg%3E)
365admin
0
Reputation points
commented 2025-03-13T13:09:12.57+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 71%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Ganesh Patapati
4,325
Reputation points Microsoft External Staff
1 answer
KeyChain Failed Mac for AzureVPN Client
Hi, I've been trying to set up the Azure VPN client for a customer but I'm being met with the following Error getKeyChainSecret: Failed to retrieve KeyChain secret. Status code -25300 16/04/2024 09:58:35 Warning removeClientAuthLoginCredentials: Failed…
asked 2024-04-16T11:47:01.7933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(73.60000000000001, 49%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC3%3C/text%3E%3C/svg%3E)
ConnorPitt-3116
0
Reputation points
commented 2025-03-12T14:43:39.5+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 35%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEL%3C/text%3E%3C/svg%3E)
Edward Lee
0
Reputation points
0 answers
Local Network gateway BGP
Hello, I have topology like below where i set VGW as active active for redudancy. With this topology should i define the LAN address 10.107.0.0/16 and 10.210.0.107 in LNG1 and 10.107.0.0/16 and 10.210.0.207 in LNG2? Or we let the address space to be…
asked 2025-03-09T12:10:01.3133333+00:00
Handian Sudianto
5,776
Reputation points
commented 2025-03-12T01:12:34.48+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 81%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sai Prasanna Sinde
4,340
Reputation points Microsoft External Staff
1 answer
Azure VPN Connection Issues on MacBook Air M1
Unable to connect to Azure VPN on MacBook Air M1. One day, the connection works fine, but the next day, the error message "Failed to connect to server. Server ended connection" appears. Manual installation of Rosetta did not resolve the issue.…
asked 2025-03-07T23:31:26.5433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 61%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHS%3C/text%3E%3C/svg%3E)
Hana Santos
0
Reputation points
commented 2025-03-12T01:08:40.91+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 36%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGS%3C/text%3E%3C/svg%3E)
G Sree Vidya
260
Reputation points Microsoft External Staff
1 answer
One of the answers was accepted by the question author.
Certificate information is empty, ERROR: client certificate issuer cannot be empty
I tried to import the certificate into azure VPN after downloading from virtual-network-gateway on Azure. While using and saving the imported .html file in the Azure VPN Client, it is giving the following error, "client certificate issuer cannot be…
asked 2025-03-11T15:25:48.8633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 76%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Raja Meer Baz Khan
40
Reputation points
accepted 2025-03-11T20:26:05.2166667+00:00
Raja Meer Baz Khan
40
Reputation points
1 answer
One of the answers was accepted by the question author.
Server did not respond properly to VPN control packets. Session State: key Material Sent
I tried to add the certificate into azure VPN after downloading from virtual-network-gateway on Azure. It is giving me the above error when I try to connect. What are possible things that I can check to fix it?
asked 2025-03-11T14:44:22.4333333+00:00
Raja Meer Baz Khan
40
Reputation points
accepted 2025-03-11T20:25:15.9366667+00:00
Raja Meer Baz Khan
40
Reputation points
1 answer
update IP SKU on VNG
How do I update publik IP associated with VNG from Basic?
asked 2025-03-07T18:20:32.5166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 31%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
AZAdmin
0
Reputation points
commented 2025-03-11T18:28:12.09+00:00
Rohith Vinnakota
3,160
Reputation points Microsoft External Staff
3 answers
Error While Connecting to Azure VPN: "Custom Script (to update your routing table) failed (80070002)"
Hello, I am encountering an issue while connecting to an Azure VPN. After initiating the connection, I get the following error message: Hello, I am encountering an issue while connecting to an Azure VPN. After initiating the connection, I get the…
asked 2025-01-23T12:11:08.3066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 15%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKP%3C/text%3E%3C/svg%3E)
Ketan Patel
0
Reputation points
commented 2025-03-11T14:22:27.41+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 76%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERL%3C/text%3E%3C/svg%3E)
Ronald Lim
5
Reputation points
1 answer
How to upgrade VPN Gateway from Basic tier to VpnGw1AZ without deleting existing connections?
Problem: I am currently using a Basic tier VPN Gateway in Azure. I need to upgrade it to VpnGw1AZ with a Standard Public IP. However, there is no direct upgrade option, and I cannot delete the existing VPN Gateway because it has several active…
asked 2025-03-04T08:55:12+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(259.20000000000005, 31%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Abhilash Subramanian
1
Reputation point
commented 2025-03-11T11:48:50.8233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 15%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPB%3C/text%3E%3C/svg%3E)
Praveen Bandaru
1,010
Reputation points Microsoft External Staff
0 answers
P2S VPN with custom audience on Mac OS 15.3.1 Sequoia Unable to use Digicert Global Root G2
I've created a VPN Gateway and configured P2S following the official MS tutorial "https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-register-custom-app". My application is running on a custom audience so that I can control…
asked 2025-03-07T12:45:12.4266667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 99%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPT%3C/text%3E%3C/svg%3E)
Palhota, Tiago
0
Reputation points
commented 2025-03-11T10:25:59.5733333+00:00
Ganesh Patapati
4,325
Reputation points Microsoft External Staff
1 answer
Azure Basic to Standard SKU change
Azure Basic to Standard SKU changes. I currently have a number of File shares setup in Azure and it looks like I do not need to implement these changes in this area. However I do have a VnetPip and LicenseServer-ip when I search on Public IP…
asked 2025-03-06T23:55:25.39+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 73%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDE%3C/text%3E%3C/svg%3E)
Don Evans
0
Reputation points
commented 2025-03-11T01:15:25.6666667+00:00
G Sree Vidya
260
Reputation points Microsoft External Staff
1 answer
Unable to Ping Azure VM from Nested Hyper-V VM
Attempting to ping an Azure VM (10.3.1.4) in the Hub Virtual Network (10.3.0.0/16) from a nested VM (VM1 at 192.168.100.10) running on a Hyper-V host (10.2.1.5) within another Virtual Network, HyperVNet (10.2.0.0/16). The networks are connected via a…
asked 2025-03-04T17:21:56.5133333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 3%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESB%3C/text%3E%3C/svg%3E)
Somil Bajaj
0
Reputation points
commented 2025-03-10T16:17:07.7666667+00:00
Rohith Vinnakota
3,160
Reputation points Microsoft External Staff
1 answer
Site-to-Site VPN connection over ExpressRoute private peering not valid
Hello, It seems this article is either outdated or wrong with what it is currently proposing - the requirements most likely need to change. We have the same issue as described here, we have full control of the firewall from on-prem and can…
asked 2024-10-18T10:57:14.8866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(22.400000000000002, 64%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Dean
0
Reputation points
commented 2025-03-10T16:16:06.8066667+00:00
Ganesh Patapati
4,325
Reputation points Microsoft External Staff
1 answer
Do we need to upgrade from basic SKU public IP to Standard?
Do we need to upgrade from basic public IP SKU before 9/2025 or will our basic public IP SKU continue to work past the retirement date? The notice isn't very clear as to what will happen to existing basic public IP SKU, we just see that we won't be able…
asked 2025-03-07T00:08:13.77+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(297.6, 19%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAI%3C/text%3E%3C/svg%3E)
Adaptive Information Systems
0
Reputation points
edited a comment 2025-03-10T06:28:32.3366667+00:00
Sai Prasanna Sinde
4,340
Reputation points Microsoft External Staff
6 answers
VPN Gateway drops tunnels when NAT rules feature enabled
Hi All, I am very new to Azure (but have 20+ years experience in networking) so apologies of this is something simple im missing here. I have successfully configured a site-to-site VPN tunnel between an on-prem Meraki MX firewall and a VPN…
asked 2022-08-24T13:21:46.227+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 45%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
shaun Phillips
36
Reputation points
answered 2025-03-09T19:50:22.89+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 23%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Manuel Torres Pereira
0
Reputation points