Skip to content

Commit 1f46933

Browse files
authored
Update ikev2-openvpn-from-sstp.md
1 parent 0420f49 commit 1f46933

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

articles/vpn-gateway/ikev2-openvpn-from-sstp.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,10 @@ To add IKEv2 to an existing gateway, go to the "point-to-site configuration" tab
4343

4444
:::image type="content" source="./media/ikev2-openvpn-from-sstp/add-tunnel-type.png" alt-text="Screenshot that shows the Point-to-site configuration page with the Tunnel type drop-down open, and IKEv2 and SSTP(SSL) selected." lightbox="./media/ikev2-openvpn-from-sstp/add-tunnel-type.png":::
4545

46+
>[!NOTE]
47+
> When you have both SSTP and IKEv2 enabled on the Gateway, the point-to-site address pool will be statically split between the two, so clients using different protocols will be assigned IP addresses from either sub-range. Note that the maximum amount of SSTP clients is always 128 even if the address range is larger than /24 resulting in a bigger amount of addresses available for IKEv2 clients. For smaller ranges, the pool will be equally halved. Traffic Selectors used by the gateway may not include the Point to Site address range CIDR, but the two sub-range CIDRs.
48+
>
49+
4650
### Option 2 - Remove SSTP and enable OpenVPN on the Gateway
4751

4852
Since SSTP and OpenVPN are both TLS-based protocol, they can't coexist on the same gateway. If you decide to move away from SSTP to OpenVPN, you'll have to disable SSTP and enable OpenVPN on the gateway. This operation will cause the existing clients to lose connectivity to the VPN gateway until the new profile has been configured on the client.
@@ -158,4 +162,4 @@ A P2S configuration requires quite a few specific steps. The following articles
158162

159163
* [Configure a P2S connection - Azure certificate authentication](vpn-gateway-howto-point-to-site-rm-ps.md)
160164

161-
**"OpenVPN" is a trademark of OpenVPN Inc.**
165+
**"OpenVPN" is a trademark of OpenVPN Inc.**

0 commit comments

Comments
 (0)