Merge pull request #225065 from cherylmc/Secondary-profile

update

Author: denrea

articles/vpn-gateway/media/point-to-site-vpn-client-cert-windows/configure-certificate.png

@@ -5,7 +5,7 @@ description: Learn how to configure VPN clients for P2S configurations that use
 author: cherylmc
 ms.service: vpn-gateway
 ms.topic: how-to
-ms.date: 01/10/2023
+ms.date: 01/25/2023
 ms.author: cherylmc
 ---
 
@@ -109,7 +109,7 @@ When you open the zip file, you'll see the **AzureVPN** folder. Locate the **azu
 
 1. In the window, navigate to the **azurevpnconfig.xml** file, select it, then click **Open**.
 
-1. From the **Certificate Information** dropdown, select the name of the child certificate (the client certificate). For example, **P2SChildCert**.
+1. From the **Certificate Information** dropdown, select the name of the child certificate (the client certificate). For example, **P2SChildCert**. You can also (optionally) select a [Secondary Profile](#secondary-profile).
 
    :::image type="content" source="./media/point-to-site-vpn-client-cert-windows/configure-certificate.png" alt-text="Screenshot showing Azure VPN client profile configuration page." lightbox="./media/point-to-site-vpn-client-cert-windows/configure-certificate.png":::
 
@@ -127,7 +127,7 @@ When you open the zip file, you'll see the **AzureVPN** folder. Locate the **azu
 
 The following sections discuss additional optional configuration settings that are available for the Azure VPN Client.
 
-#### Secondary VPN client profile
+#### Secondary Profile
 
 [!INCLUDE [Secondary profile](../../includes/vpn-gateway-azure-vpn-client-secondary-profile.md)]
 

articles/vpn-gateway/point-to-site-vpn-client-cert-windows.md

@@ -3,9 +3,17 @@ author: cherylmc
 ms.service: vpn-gateway
 ms.topic: include
 ms.author: cherylmc
-ms.date: 11/23/2022
+ms.date: 01/25/2023
 ---
 
-Azure VPN client provides high availability for client profiles. Adding a secondary client profile gives the client a more resilient way to access the VPN. If there's a region outage or failure to connect to the primary VPN client profile, the Azure VPN Client will auto-connect to the secondary client profile without causing any disruptions.
+The Azure VPN Client provides high availability for client profiles. Adding a secondary client profile gives the client a more resilient way to access the VPN. If there's a region outage or failure to connect to the primary VPN client profile, the Azure VPN Client will auto-connect to the secondary client profile without causing any disruptions.
 
-This feature requires the Azure VPN Client version **2.2124.51.0**, which is currently in the process of being rolled out. To use this feature, add another VPN client profile to the Azure VPN Client. Then, select the additional profile from the **Secondary profile** dropdown.
+This feature requires the Azure VPN Client version **2.2124.51.0**, which is currently in the process of being rolled out. For this example, we'll add a secondary profile to an already existing profile.
+
+Using the settings in this example, if the client can't connect to VNet1, it will automatically connect to VNet2 without causing disruptions.
+
+1. Add another VPN client profile to the Azure VPN Client. For this example, we added a profile to connect to **VNet2**.
+1. Next, go to the **VNet1** profile and click "**...**", then **Configure**.
+1. From the **Secondary Profile** dropdown, select the profile for **VNet2**. Then, **Save** your settings.
+
+   :::image type="content" source="./media/vpn-gateway-azure-vpn-client-secondary-profile/azure-vpn-client.png" alt-text="Screenshot showing Azure VPN client profile configuration page with secondary profile." lightbox="./media/vpn-gateway-azure-vpn-client-secondary-profile/secondary-profile.png":::