You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/vpn-gateway/reset-gateway.md
+18-20Lines changed: 18 additions & 20 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ description: Learn how to reset a gateway or a gateway connection to reestablish
5
5
author: cherylmc
6
6
ms.service: vpn-gateway
7
7
ms.topic: how-to
8
-
ms.date: 06/13/2022
8
+
ms.date: 07/28/2023
9
9
ms.author: cherylmc
10
10
---
11
11
# Reset a VPN gateway or a connection
@@ -45,35 +45,41 @@ Before you reset your gateway, verify the key items listed below for each IPsec
45
45
Verify the following items before resetting your gateway:
46
46
47
47
* The Internet IP addresses (VIPs) for both the Azure VPN gateway and the on-premises VPN gateway are configured correctly in both the Azure and the on-premises VPN policies.
48
-
* The pre-shared key must be the same on both Azure and on-premises VPN gateways.
48
+
* The preshared key must be the same on both Azure and on-premises VPN gateways.
49
49
* If you apply specific IPsec/IKE configuration, such as encryption, hashing algorithms, and PFS (Perfect Forward Secrecy), ensure both the Azure and on-premises VPN gateways have the same configurations.
50
50
51
51
### <aname="portal"></a>Azure portal
52
52
53
-
You can reset a Resource Manager VPN gateway using the Azure portal. If you want to reset a classic gateway, see the PowerShell steps for the [Classic deployment model](#resetclassic).
53
+
You can reset a Resource Manager VPN gateway using the Azure portal.
The cmdlet for resetting a gateway is **Reset-AzVirtualNetworkGateway**. Before performing a reset, make sure you have the latest version of the [PowerShell Az cmdlets](/powershell/module/az.network). The following example resets a virtual network gateway named VNet1GW in the TestRG1 resource group:
When you receive a return result, you can assume the gateway reset was successful. However, there's nothing in the return result that indicates explicitly that the reset was successful. If you want to look closely at the history to see exactly when the gateway reset occurred, you can view that information in the [Azure portal](https://portal.azure.com). In the portal, navigate to **'GatewayName' -> Resource Health**.
67
+
68
+
### <aname="cli"></a>Azure CLI
69
+
70
+
To reset the gateway, use the [az network vnet-gateway reset](/cli/azure/network/vnet-gateway) command. The following example resets a virtual network gateway named VNet5GW in the TestRG5 resource group:
71
+
72
+
```azurecli-interactive
73
+
az network vnet-gateway reset -n VNet5GW -g TestRG5
74
+
```
71
75
72
76
When you receive a return result, you can assume the gateway reset was successful. However, there's nothing in the return result that indicates explicitly that the reset was successful. If you want to look closely at the history to see exactly when the gateway reset occurred, you can view that information in the [Azure portal](https://portal.azure.com). In the portal, navigate to **'GatewayName' -> Resource Health**.
73
77
74
-
####<aname="resetclassic"></a>Classic deployment model
78
+
### <aname="resetclassic"></a>Reset a classic gateway
75
79
76
-
The cmdlet for resetting a gateway is **Reset-AzureVNetGateway**. The Azure PowerShell cmdlets for Service Management must be installed locally on your desktop. You can't use Azure Cloud Shell. Before performing a reset, make sure you have the latest version of the [Service Management (SM) PowerShell cmdlets](/powershell/azure/servicemanagement/install-azure-ps#azure-service-management-cmdlets). When using this command, make sure you're using the full name of the virtual network. Classic VNets that were created using the portal have a long name that is required for PowerShell. You can view the long name by using 'Get-AzureVNetConfig -ExportToFile C:\Myfoldername\NetworkConfig.xml'.
80
+
The cmdlet for resetting a classic gateway is **Reset-AzureVNetGateway**. The Azure PowerShell cmdlets for Service Management must be installed locally on your desktop. You can't use Azure Cloud Shell. Before performing a reset, make sure you have the latest version of the [Service Management (SM) PowerShell cmdlets](/powershell/azure/servicemanagement/install-azure-ps#azure-service-management-cmdlets).
81
+
82
+
When using this command, make sure you're using the full name of the virtual network. Classic VNets that were created using the portal have a long name that is required for PowerShell. You can view the long name by using 'Get-AzureVNetConfig -ExportToFile C:\Myfoldername\NetworkConfig.xml'.
77
83
78
84
The following example resets the gateway for a virtual network named "Group TestRG1 TestVNet1" (which shows as simply "TestVNet1" in the portal):
To reset the gateway, use the [az network vnet-gateway reset](/cli/azure/network/vnet-gateway) command. The following example resets a virtual network gateway named VNet5GW in the TestRG5 resource group:
101
+
## Next steps
98
102
99
-
```azurecli-interactive
100
-
az network vnet-gateway reset -n VNet5GW -g TestRG5
101
-
```
102
-
103
-
Result:
104
-
105
-
When you receive a return result, you can assume the gateway reset was successful. However, there's nothing in the return result that indicates explicitly that the reset was successful. If you want to look closely at the history to see exactly when the gateway reset occurred, you can view that information in the [Azure portal](https://portal.azure.com). In the portal, navigate to **'GatewayName' -> Resource Health**.
103
+
For more information about VPN Gateway, see the [VPN Gateway FAQ](vpn-gateway-vpn-faq.md).
Copy file name to clipboardExpand all lines: articles/vpn-gateway/vpn-gateway-about-point-to-site-routing.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ description: Learn about Azure Point-to-Site VPN routing for different operating
5
5
author: cherylmc
6
6
ms.service: vpn-gateway
7
7
ms.topic: article
8
-
ms.date: 12/03/2021
8
+
ms.date: 07/28/2023
9
9
ms.author: cherylmc
10
10
11
11
---
@@ -25,7 +25,7 @@ There are a number of different diagrams in this article. Each section shows a d
25
25
26
26
## <aname="isolatedvnet"></a>One isolated VNet
27
27
28
-
The Point-to-Site VPN gateway connection in this example is for a VNet that is not connected or peered with any other virtual network (VNet1). In this example, clients can access VNet1.
28
+
The Point-to-Site VPN gateway connection in this example is for a VNet that isn't connected or peered with any other virtual network (VNet1). In this example, clients can access VNet1.
@@ -49,7 +49,7 @@ The Point-to-Site VPN gateway connection in this example is for a VNet that is n
49
49
50
50
In this example, the Point-to-Site VPN gateway connection is for VNet1. VNet1 is peered with VNet2. VNet 2 is peered with VNet3. VNet1 is peered with VNet4. There is no direct peering between VNet1 and VNet3. VNet1 has “Allow gateway transit” and VNet2 and VNet4 have “Use remote gateways” enabled.
51
51
52
-
Clients using Windows can access directly peered VNets, but the VPN client must be downloaded again if any changes are made to VNet peering or the network topology. Non-Windows clients can access directly peered VNets. Access is not transitive and is limited to only directly peered VNets.
52
+
Clients using Windows can access directly peered VNets, but the VPN client must be downloaded again if any changes are made to VNet peering or the network topology. Non-Windows clients can access directly peered VNets. Access isn't transitive and is limited to only directly peered VNets.
@@ -77,7 +77,7 @@ Clients using Windows can access directly peered VNets, but the VPN client must
77
77
78
78
## <aname="multis2s"></a>Multiple VNets connected using an S2S VPN
79
79
80
-
In this example, the Point-to-Site VPN gateway connection is for VNet1. VNet1 is connected to VNet2 using a Site-to-Site VPN connection. VNet2 is connected to VNet3 using a Site-to-Site VPN connection. There is no direct peering or Site-to-Site VPN connection between VNet1 and VNet3. All Site-to-Site connections are not running BGP for routing.
80
+
In this example, the Point-to-Site VPN gateway connection is for VNet1. VNet1 is connected to VNet2 using a Site-to-Site VPN connection. VNet2 is connected to VNet3 using a Site-to-Site VPN connection. There is no direct peering or Site-to-Site VPN connection between VNet1 and VNet3. All Site-to-Site connections aren't running BGP for routing.
81
81
82
82
Clients using Windows, or another supported OS, can only access VNet1. To access additional VNets, BGP must be used.
83
83
@@ -133,7 +133,7 @@ Clients using Windows, or another supported OS, can access all VNets that are co
133
133
134
134
## <aname="vnetbranch"></a>One VNet and a branch office
135
135
136
-
In this example, the Point-to-Site VPN gateway connection is for VNet1. VNet1 is not connected/ peered with any other virtual network, but is connected to an on-premises site through a Site-to-Site VPN connection that is not running BGP.
136
+
In this example, the Point-to-Site VPN gateway connection is for VNet1. VNet1 isn't connected/ peered with any other virtual network, but is connected to an on-premises site through a Site-to-Site VPN connection that isn't running BGP.
137
137
138
138
Windows and non-Windows clients can only access VNet1.
139
139
@@ -159,9 +159,9 @@ Windows and non-Windows clients can only access VNet1.
159
159
160
160
## <aname="vnetbranchbgp"></a>One VNet and a branch office (BGP)
161
161
162
-
In this example, the Point-to-Site VPN gateway connection is for VNet1. VNet1 is not connected or peered with any other virtual network, but is connected to an on-premises site (Site1) through a Site-to-Site VPN connection running BGP.
162
+
In this example, the Point-to-Site VPN gateway connection is for VNet1. VNet1 isn't connected or peered with any other virtual network, but is connected to an on-premises site (Site1) through a Site-to-Site VPN connection running BGP.
163
163
164
-
Windows clients can access the VNet and the branch office (Site1), but the routes to Site1 must be manually added to the client. Non-Windows clients can access the VNet as well as the on-premises branch office.
164
+
Windows clients can access the VNet and the branch office (Site1), but the routes to Site1 must be manually added to the client. Non-Windows clients can access the VNet and the on-premises branch office.
165
165
166
166
:::image type="content" source="./media/vpn-gateway-about-point-to-site-routing/branch-bgp.jpg" alt-text="Routing with a VNet and a branch office - BGP" lightbox="./media/vpn-gateway-about-point-to-site-routing/branch-bgp.jpg":::
Copy file name to clipboardExpand all lines: includes/vpn-gateway-reset-gw-portal-include.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,10 +2,10 @@
2
2
author: cherylmc
3
3
ms.service: vpn-gateway
4
4
ms.topic: include
5
-
ms.date: 09/14/2022
5
+
ms.date: 07/28/2023
6
6
ms.author: cherylmc
7
7
---
8
8
9
9
1. In the portal, go to the virtual network gateway that you want to reset.
10
-
1. On the **Virtual network gateway** page, in the left pane, scroll down to the **Support + Troubleshooting** section and select **Reset**.
10
+
1. On the **Virtual network gateway** page, in the left pane, scroll down to **Reset**.
11
11
1. On the **Reset** page, click **Reset**. Once the command is issued, the current active instance of the Azure VPN gateway is rebooted immediately. Resetting the gateway will cause a gap in VPN connectivity, and may limit future root cause analysis of the issue.
0 commit comments