Merge pull request #242957 from cherylmc/s2s-device

update

Author: JamesJBarnett

articles/vpn-gateway/tutorial-site-to-site-portal.md

@@ -6,7 +6,7 @@ author: cherylmc
 ms.author: cherylmc
 ms.service: vpn-gateway
 ms.topic: tutorial
-ms.date: 04/10/2023
+ms.date: 06/23/2023
 
 ---
 

includes/media/vpn-gateway-add-gw-portal/instance-details.png

@@ -2,7 +2,7 @@
  author: cherylmc
  ms.service: vpn-gateway
  ms.topic: include
- ms.date: 02/17/2023
+ ms.date: 06/23/2023
  ms.author: cherylmc
 
 # The numbers in this include are correct. They add on to sections in multiple articles that are already numbered.

includes/media/vpn-gateway-add-local-network-gateway-portal-include/basics.png

@@ -2,7 +2,7 @@
  author: cherylmc
  ms.service: vpn-gateway
  ms.topic: include
- ms.date: 02/17/2023
+ ms.date: 06/23/2023
  ms.author: cherylmc
 ---
 

includes/media/vpn-gateway-basic-vnet-rm-portal-include/basics.png

@@ -5,7 +5,7 @@
  author: cherylmc
  ms.service: vpn-gateway
  ms.topic: include
- ms.date: 09/14/2022
+ ms.date: 06/23/2023
  ms.author: cherylmc
  ms.custom: include file
 ---
@@ -20,8 +20,8 @@
    * **Name:** Specify a name for your local network gateway object.
    * **Endpoint:** Select the endpoint type for the on-premises VPN device - **IP address** or **FQDN (Fully Qualified Domain Name)**.
       * **IP address**: If you have a static public IP address allocated from your Internet service provider for your VPN device, select the IP address option and fill in the IP address as shown in the example. This is the public IP address of the VPN device that you want Azure VPN gateway to connect to. If you don't have the IP address right now, you can use the values shown in the example, but you'll need to go back and replace your placeholder IP address with the public IP address of your VPN device. Otherwise, Azure won't be able to connect.
-      * **FQDN**: If you have a dynamic public IP address that could change after certain period of time, often determined by your Internet service provider, you can use a constant DNS name with a Dynamic DNS service to point to your current public IP address of your VPN device. Your Azure VPN gateway will resolve the FQDN to determine the public IP address to connect to. 
-   * **Address Space** refers to the address ranges for the network that this local network represents. You can add multiple address space ranges. Make sure that the ranges you specify here don't overlap with ranges of other networks that you want to connect to. Azure will route the address range that you specify to the on-premises VPN device IP address. *Use your own values here if you want to connect to your on-premises site, not the values shown in the example*.
+      * **FQDN**: If you have a dynamic public IP address that could change after certain period of time, often determined by your Internet service provider, you can use a constant DNS name with a Dynamic DNS service to point to your current public IP address of your VPN device. Your Azure VPN gateway resolves the FQDN to determine the public IP address to connect to. 
+   * **Address Space** refers to the address ranges for the network that this local network represents. You can add multiple address space ranges. Make sure that the ranges you specify here don't overlap with ranges of other networks that you want to connect to. Azure routes the address range that you specify to the on-premises VPN device IP address. *Use your own values here if you want to connect to your on-premises site, not the values shown in the example*.
 
    > [!NOTE]
    >

includes/vpn-gateway-add-gw-pip-portal-include.md

@@ -3,7 +3,7 @@ author: cherylmc
 ms.author: cherylmc
 ms.service: vpn-gateway
 ms.topic: include
-ms.date: 06/06/2023
+ms.date: 06/23/2023
 ---
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
@@ -20,17 +20,15 @@ ms.date: 06/06/2023
    - **Name**: Enter the name for your virtual network.
    - **Region**: Select the location for your VNet. The location determines where the resources that you deploy to this VNet will live.
 
-1. Select **Security** to advance to the Security tab. For this exercise, leave the default values.
+1. Select **Security** to advance to the Security tab. For this exercise, leave the default values for all the services on this page.
 
-   - **Azure Bastion**: Disable
-   - **Azure Firewall**: Disable
-   - **Azure DDoS Network Protection**: Disable
 1. Select **IP Addresses** to advance to the IP Addresses tab. On the **IP Addresses** tab, configure the settings.
 
-   - **IPv4 address space**: By default, an address space is automatically created. You can select the address space and adjust it to reflect your own values. You can also add more address spaces by selecting the box below the existing address space and specifying the values for the additional address space. For example, you can change the IPv4 address field to **10.1.0.0/16** from the default values that are automatically populated.
-   - **+ Add subnet**: If you use the default address space, a default subnet is created automatically. If you change the address space, you need to add a subnet. Select **+ Add subnet** to open the **Add subnet** window. Configure the following settings, then select **Add** at the bottom of the page to add the values.
+   - **IPv4 address space**: By default, an address space is automatically created. You can select the address space and adjust it to reflect your own values. You can also add a different address space and remove the default that was automatically created. For example, you can specify the starting address as **10.1.0.0** and specify the address space size as **/16**, then **Add** that address space.
+   - **+ Add subnet**: If you use the default address space, a default subnet is created automatically. If you change the address space, add a new subnet within that address space. Select **+ Add subnet** to open the **Add subnet** window. Configure the following settings, then select **Add** at the bottom of the page to add the values.
       - **Subnet name**: Example: **FrontEnd**.
-      - **Subnet address range**: The address range for this subnet. For example, **10.1.0.0/24**.
+      - **Subnet address range**: The address range for this subnet. For example, **10.1.0.0** and **/24**.
 
+1. Review the **IP addresses** page and remove any address spaces or subnets that you don't need.
 1. Select **Review + create** to validate the virtual network settings.
 1. After the settings have been validated, select **Create** to create the virtual network.

includes/vpn-gateway-add-gw-portal-include.md

@@ -5,10 +5,9 @@
  author: cherylmc
  ms.service: vpn-gateway
  ms.topic: include
- ms.date: 04/29/2022
+ ms.date: 06/23/2023
  ms.author: cherylmc
  ms.custom: include file
 ---
 > [!NOTE]
->When using a virtual network as part of a cross-premises architecture, be sure to coordinate with your on-premises network administrator to carve out an IP address range that you can use specifically for this virtual network. If a duplicate address range exists on both sides of the VPN connection, traffic will route in an unexpected way. Additionally, if you want to connect this virtual network to another virtual network, the address space cannot overlap with the other virtual network. Plan your network configuration accordingly.
->
+> When using a virtual network as part of a cross-premises architecture, be sure to coordinate with your on-premises network administrator to carve out an IP address range that you can use specifically for this virtual network. If a duplicate address range exists on both sides of the VPN connection, traffic will route in an unexpected way. Additionally, if you want to connect this virtual network to another virtual network, the address space cannot overlap with the other virtual network. Plan your network configuration accordingly.