You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: This article helps you understand Point-to-Site connections and helps you decide which P2S VPN gateway authentication type to use.
4
4
services: vpn-gateway
5
5
author: cherylmc
6
6
7
7
ms.service: vpn-gateway
8
8
ms.topic: conceptual
9
-
ms.date: 02/07/2020
9
+
ms.date: 02/19/2020
10
10
ms.author: cherylmc
11
11
12
12
---
@@ -49,16 +49,16 @@ At a high level, you need to perform the following steps to configure Azure AD a
49
49
50
50
1.[Configure an Azure AD tenant](openvpn-azure-ad-tenant.md)
51
51
52
-
2.[Enable Azure AD authentication on the gateway](https://docs.microsoft.com/azure/vpn-gateway/openvpn-azure-ad-tenant#enable-authentication)
52
+
2.[Enable Azure AD authentication on the gateway](openvpn-azure-ad-tenant.md#enable-authentication)
53
53
54
54
3.[Download and configure Azure VPN Client](https://go.microsoft.com/fwlink/?linkid=2117554)
55
55
56
56
57
57
### Authenticate using Active Directory (AD) Domain Server
58
58
59
-
AD Domain authentication allows users to connect to Azure using their organization domain credentials. It requires a RADIUS server that integrates with the AD server. Organizations can also leverage their existing RADIUS deployment.
59
+
AD Domain authentication allows users to connect to Azure using their organization domain credentials. It requires a RADIUS server that integrates with the AD server. Organizations can also leverage their existing RADIUS deployment.
60
60
61
-
The RADIUS server could be deployed on-premises or in your Azure VNET. During authentication, the Azure VPN Gateway acts as a pass through and forwards authentication messages back and forth between the RADIUS server and the connecting device. So Gateway reachability to the RADIUS server is important. If the RADIUS server is present on-premises, then a VPN S2S connection from Azure to the on-premises site is required for reachability.
61
+
The RADIUS server could be deployed on-premises or in your Azure VNet. During authentication, the Azure VPN Gateway acts as a pass through and forwards authentication messages back and forth between the RADIUS server and the connecting device. So Gateway reachability to the RADIUS server is important. If the RADIUS server is present on-premises, then a VPN S2S connection from Azure to the on-premises site is required for reachability.
62
62
63
63
The RADIUS server can also integrate with AD certificate services. This lets you use the RADIUS server and your enterprise certificate deployment for P2S certificate authentication as an alternative to the Azure certificate authentication. The advantage is that you don’t need to upload root certificates and revoked certificates to Azure.
64
64
@@ -152,9 +152,6 @@ The zip file also provides the values of some of the important settings on the A
152
152
|TLS_RSA_WITH_AES_128_CBC_SHA256 |
153
153
|TLS_RSA_WITH_AES_256_CBC_SHA256 |
154
154
155
-
156
-
157
-
158
155
## <aname="configure"></a>How do I configure a P2S connection?
159
156
160
157
A P2S configuration requires quite a few specific steps. The following articles contain the steps to walk you through P2S configuration, and links to configure the VPN client devices:
@@ -165,11 +162,9 @@ A P2S configuration requires quite a few specific steps. The following articles
Copy file name to clipboardExpand all lines: includes/vpn-gateway-faq-p2s-all-include.md
+19-1Lines changed: 19 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@
5
5
author: cherylmc
6
6
ms.service: vpn-gateway
7
7
ms.topic: include
8
-
ms.date: 12/17/2019
8
+
ms.date: 02/19/2020
9
9
ms.author: cherylmc
10
10
ms.custom: include file
11
11
---
@@ -92,3 +92,21 @@ Azure supports Windows, Mac and Linux for P2S VPN.
92
92
### I already have an Azure VPN Gateway deployed. Can I enable RADIUS and/or IKEv2 VPN on it?
93
93
94
94
Yes, you can enable these new features on already deployed gateways using Powershell or the Azure portal, provided that the gateway SKU that you are using supports RADIUS and/or IKEv2. For example, the VPN gateway Basic SKU does not support RADIUS or IKEv2.
95
+
96
+
### <aname="removeconfig"></a>How do I remove the configuration of a P2S connection?
97
+
98
+
A P2S configuration can be removed using Azure CLI and PowerShell using the following commands:
0 commit comments