Hub & Spoke Network Architecture With Azure P2S VPN with Azure Firewall Connectivity
Is following architecture supported? I have Hub and Spoke architecture in Azure. I have following 2 vnets, connected via peering with forwarding enabled. Hub Vnet: app-gw subnet: with UDR to forward traffic from Spoke Vnet S2S VPN via firewall (e.g.…
Azure VPN Gateway
How to put multiple VMs behind a single private IP address on Azure?
I'm working on creating a Blue/Green deployment for a product in Azure but I'm running into a problem regarding outbound traffic to an on-premisses database. Our initial idea can be seen in this diagram: We have three main "moving parts": A…
Azure Virtual Machines
Azure VPN Gateway
Azure Virtual Network
Azure Load Balancer
Azure Startups

Not being able to configure a VPN connection to a site-to-site on premise VPN
I have set up a vpn connection to an on premises, the first try, I use a VpnGateway with sku VpnGw2AZ and everything works as expected. The issue arrives due that the cost of this sku is too high so I switched to Basic. But this sku doesn't allow me to…
Azure VPN Gateway
VPN Gateway KO, it cannot even be reset
My VPN Gateway stopped working, now is even refusing to be reset. I tried removing the P2S configuration, I think it still pending, which should be the reason why the reset request is bounced. But I requested the deletion of the P2S configuration more…
Azure VPN Gateway
Regarding VPN GW- your gateway is in standby mode.Unavailable (Unplanned) : (Unplanned)
Dear community, I got an alert as below screenshot but my vpn gateway is configured as active-active and i also have two on-premises vpn gateway with two public IPs which is then setup as Local Network Gateway on azure vpn connections. All status were…
Azure VPN Gateway
Azure VPN Gateway Connection Traffic suddenly stops
We have an azure VPN gateway with a connection to an on-site premise device. The configuration has been setup for years and it's been working consistently and reliably for long time. Recently, we notice that the the services deployed in our AKS…
Azure VPN Gateway
After enabling VPN NAT (Ingress 10.31.194.177→10.0.0.4) on VpnGw2, S2S connection VNet1toSite1 stays at “Unknown”; no Phase 2 established.
We have an Azure site-to-site VPN connection “VNet1toSite1” between an on-prem FortiGate (public IP x.x.x.x) and an Azure VPN gateway “vng-customer-pro” (SKU VpnGw2). The goal is to publish the VM 10.0.0.4 to the customer as 10.31.194.177 using VPN…
Azure VPN Gateway
Azure Virtual Network Gateway stubbornly keeps cached expired root certificate and won't let me update it.
The root certificate for my Point-to-site configuration of the Azure VPN Gateway was about to expire (with the child client certificates I've signed with it already having expired), so I needed to replace it with a new one. After generating the new cert,…
Azure VPN Gateway
VPN Gateway not routing 1 subnet
**I have a working VPN Gateway with 3 local gateways and 3 connections all going to 3 Meraki sites. For each site I have multiple subnets setup under the local gateways. All but one is working. 10.1.0.0/16 will simply not work. The traffic never hits the…
Azure VPN Gateway
Can Azure support please convert my Central US region Virtual Network Gateway to SKU VpnGW1?
I cannot convert my current VNG SKU VpnGW2 to anything lower, even though it is available in my region, e.g. Central US. Powersell scripts don't work, Azure CLI commands don't work. Can I get assistance from Azure support?
Azure VPN Gateway
Azure VPN Client Mac France
Hello, I have a problem: I need to use the Azure VPN Client app on macOS. However, when I go to the App Store, the application is not available in France. How can I download the .pkg or .dmg file directly? Alternatively, could you make the app available…
Azure VPN Gateway
IP address name resolution issue.
We have a Point-to-Site VPN connection configured in a Hub and Spoke model. When a user connects via the Point-to-Site VPN, they are unable to access the web through the URL, indicating that our DNS resolution is not functioning properly. Every possible…
Azure VPN Gateway

BGP and Vnet Peering
I have 2 vnet and both vnet have peering, so vnet1 can talk to vnet2. Also i have vpn gateway on vnet1 and from my onprem can reach to vnet1 and also to vnet2. But when i enable BGP on the VPN gateway why from onprem only can reach to vnet1 and not to…
Azure VPN Gateway


How to push files from a secured on prem VM without public internet access to azure blob storage
Hi, I've a scenario where I need to push files to Azure blob storage in real time from secured OT network VM which do not have internet access within the IDMZ to Level 5 IT DMZ and then to Blob Storage to be consumed by third party API. Any thoughts…
Azure VPN Gateway
Combining Global Secure Access With Azure VPN
We are rolling out Global Secure Access, however we are running into a few issues of which the main one is that it does not work in combination with Azure VPN. As soon as Global Secure Access is activated, the VPN client disconnects. We are using Azure…
Azure VPN Gateway
Microsoft Entra ID
Error creating VPN gateway
Long story short. We are downgrading our VPN gateway to basic. We've moved most of our systems to PAAS and only need limited VPN usage. I deleted the old VPN gateway and am I trying to create a new one with the below command # === Create new Basic VPN…
Azure VPN Gateway

Cannot Delete VPN Gateway (Zombie VPN Gateway)
I haven't been able to delete a VPN Gateway for around 3 days now. Each time it fails and I get the below error: Failed to delete virtual network gateway 'dev-ad-vpn-gateway'. Error: The gateway deployment operation failed due to an intermittent error.…
Azure VPN Gateway
How to Resolve Key Vault and VPN Gateway Configuration Conflict in Azure?
Hello Azure Community, I hope you're all doing well! I’m currently working on configuring an Azure VPN Gateway (TBBD-VPN-Server) and managing keys, secrets, and certificates via Azure Key Vault (TBBD-VPN-GW-KV-EasrUS). However, I’m encountering a…
Azure VPN Gateway


Multiple VNet Gateway Transit Configuration: AWS Site-to-Site VPN and Employee Access
I'm configuring a site-to-site VPN connection between AWS and Azure using Azure Virtual Network Gateway. I have the following setup: A VNet (VNet-A) that is peered with another VNet (VNet-B) Gateway transit is enabled (checkbox for 'Enable VNet-A to…
Azure VPN Gateway
How can I access a public AKS cluster from my local machine after adding the public IP of the Virtual Network Gateway to the authorized IP ranges of the cluster?
I have created the public AKS cluster in a subnet, let's say 11.2.0.0/24, and also created the VPN gateway in the same VNet as that of the cluster and configured the point-to-site connection. I got the public IP from the virtual network gateway that I…