Merge pull request #187048 from siddomala/sidGlobalVPNProfile

Virtual WAN P2S Attach/Detach Hub from Global Profile

Author: GitHubber17

articles/virtual-wan/TOC.yml

@@ -91,6 +91,8 @@
       href: point-to-site-ipsec.md
     - name: About P2S client address pools
       href: about-client-address-pools.md
+    - name: About P2S global and hub-based profiles
+      href: global-hub-profile.md
   - name: Security
     items:
     - name: Security baseline

articles/virtual-wan/global-hub-profile.md

@@ -20,7 +20,11 @@ Azure Virtual WAN offers two types of connectivity for remote users: Global and
 
 ## Global profile
 
-The profile points to a load balancer that includes all active User VPN hubs. The user is directed to the hub that is closest to the user's geographic location. This type of connectivity is useful when users travel to different locations frequently. To download the **global** profile:
+The global profile associated with a User VPN Configuration points to a load balancer that includes all active User VPN hubs using that User VPN Configuration. A user connected to the global profile is directed to the hub that is closest to the user's geographic location. This type of connectivity is useful when users travel to different locations frequently. 
+
+For example, you can associate a VPN configuration to 2 different Virtual WAN hubs, one in West US and one in Southeast Asia. If a user connects to the global profile associated with the User VPN configuration, they will connect to the closest Virtual WAN hub based on their location. 
+
+To download the **global** profile:
 
 1. Navigate to the virtual WAN.
 2. Click **User VPN configuration**.
@@ -29,6 +33,31 @@ The profile points to a load balancer that includes all active User VPN hubs. Th
 
    ![Global profile](./media/global-hub-profile/global1.png)
 
+### Include or exclude hub from global profile
+
+By default, every hub using a specific User VPN Configuration is included in the corresponding global VPN profile. You may choose to exclude a hub from the global VPN profile, meaning a user will not be load-balanced to connect to that hub's gateway if they are using the global VPN profile. 
+
+To check whether or not the hub is included in the global VPN profile:
+
+1. Navigate to the hub
+1. Navigate to **User VPN (Point to site)** under **Connectivity** on the left-hand panel
+1. See **Gateway Attachment State** to determine if this hub is included in the global VPN profile. If the state is **attached**, then the hub is included in the global VPN profile. If the state is **detached**, then the hub is not included in the global VPN profile. 
+
+ :::image type="content" source="./media/global-hub-profile/attachment-state.png" alt-text="Screenshot showing attachment state of gateway."lightbox="./media/global-hub-profile/attachment-state.png":::
+
+To include or exclude a specific hub from the global VPN profile: 
+
+1. Click **Include/Exclude Gateway from Global Profile**
+
+   :::image type="content" source="./media/global-hub-profile/include-exclude-1.png" alt-text="Screenshot showing how to include or exclude hub from profile" lightbox="/media/global-hub-profile/include-exclude-1.png":::
+
+1. Click **Exclude** if you wish to remove this hub's gateway from the WAN Global User VPN Profile. Users who are using the Hub-level User VPN profile will still be able to connect to this gateway. Users who are using the WAN-level profile will not be able to connect to this gateway.
+
+1. Click **Include** if you wish to include this hub's gateway in the Virtual WAN Global User VPN Profile. Users who are using this WAN-level profile will be able to connect to this gateway. 
+
+
+   ![Hub profile 4](./media/global-hub-profile/include-exclude.png)
+
 ## Hub-based profile
 
 The profile points to a single hub. The user can only connect to the particular hub using this profile. To download the **hub-based** profile:
@@ -39,13 +68,14 @@ The profile points to a single hub. The user can only connect to the particular
     ![Hub profile 1](./media/global-hub-profile/hub1.png)
 3. Click **User VPN (Point to site)**.
 4. Click **Download virtual Hub User VPN profile**.
+ :::image type="content" source="./media/global-hub-profile/hub2.png" alt-text="Screenshot showing how to download hub profile."lightbox="./media/global-hub-profile/hub2.png":::
 
-   ![Hub profile 2](./media/global-hub-profile/hub2.png)
 5. Check **EAPTLS**.
 6. Click **Generate and download profile**.
 
    ![Hub profile 3](./media/global-hub-profile/download.png)
 
+
 ## Next steps
 
 To learn more about Virtual WAN, see the [Virtual WAN Overview](virtual-wan-about.md) page.