You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: In this tutorial, learn how to create and manage an Azure VPN gateway using the Azure portal.
4
+
description: In this tutorial, learn how to create and manage an Azure VPN gateway by using the Azure portal.
5
5
author: cherylmc
6
6
ms.author: cherylmc
7
7
ms.service: vpn-gateway
@@ -10,33 +10,33 @@ ms.date: 01/17/2024
10
10
11
11
---
12
12
13
-
# Tutorial: Create and manage a VPN gateway using the Azure portal
13
+
# Tutorial: Create and manage a VPN gateway by using the Azure portal
14
14
15
-
This tutorial helps you create and manage a virtual network gateway (VPN gateway) using the Azure portal. The VPN gateway is just one part of a connection architecture to help you securely access resources within a virtual network (VNet).
15
+
This tutorial helps you create and manage a virtual network gateway (VPN gateway) by using the Azure portal. The VPN gateway is just one part of a connection architecture to help you securely access resources within a virtual network.
16
16
17
-
:::image type="content" source="./media/tutorial-create-gateway-portal/gateway-diagram.png" alt-text="Diagram of virtual network and VPN gateway." lightbox="./media/tutorial-create-gateway-portal/gateway-diagram-expand.png":::
17
+
:::image type="content" source="./media/tutorial-create-gateway-portal/gateway-diagram.png" alt-text="Diagram that shows a virtual network and a VPN gateway." lightbox="./media/tutorial-create-gateway-portal/gateway-diagram-expand.png":::
18
18
19
-
* The left side of the diagram shows the VNet and the VPN gateway that you create using the steps in this article.
20
-
* You can later add different types of connections, as shown on the right side of the diagram. For example, you can create [Site-to-Site](tutorial-site-to-site-portal.md) and [Point-to-site](point-to-site-about.md) connections. See [VPN Gateway design](design.md) to view different design architectures that you can build.
19
+
* The left side of the diagram shows the virtual network and the VPN gateway that you create by using the steps in this article.
20
+
* You can later add different types of connections, as shown on the right side of the diagram. For example, you can create [site-to-site](tutorial-site-to-site-portal.md) and [point-to-site](point-to-site-about.md) connections. To view different design architectures that you can build, see [VPN gateway design](design.md).
21
21
22
-
If you want to learn more about the configuration settings used in this tutorial, see [About VPN Gateway configuration settings](vpn-gateway-about-vpn-gateway-settings.md). For more information about VPN Gateway, see [What is VPN Gateway?](vpn-gateway-about-vpngateways.md)
22
+
If you want to learn more about the configuration settings used in this tutorial, see [About VPN Gateway configuration settings](vpn-gateway-about-vpn-gateway-settings.md). For more information about Azure VPN Gateway, see [What is Azure VPN Gateway?](vpn-gateway-about-vpngateways.md).
23
23
24
24
In this tutorial, you learn how to:
25
25
26
26
> [!div class="checklist"]
27
-
> * Create a VNet
28
-
> * Create a VPN gateway
29
-
> * View the gateway public IP address
30
-
> * Resize a VPN gateway (resize SKU)
31
-
> * Reset a VPN gateway
27
+
> * Create a virtual network.
28
+
> * Create a VPN gateway.
29
+
> * View the gateway public IP address.
30
+
> * Resize a VPN gateway (resize SKU).
31
+
> * Reset a VPN gateway.
32
32
33
33
## Prerequisites
34
34
35
-
An Azure account with an active subscription. If you don't have one, [create one for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
35
+
You need an Azure account with an active subscription. If you don't have one, [create one for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
36
36
37
-
## <aname="CreatVNet"></a>Create a VNet
37
+
## <aname="CreatVNet"></a>Create a virtual network
38
38
39
-
Create a VNet using the following values:
39
+
Create a virtual network by using the following values:
40
40
41
41
***Resource group:** TestRG1
42
42
***Name:** VNet1
@@ -47,50 +47,50 @@ Create a VNet using the following values:
47
47
48
48
[!INCLUDE [Create a VNet](../../includes/vpn-gateway-basic-vnet-rm-portal-include.md)]
49
49
50
-
After you create your VNet, you can optionally configure Azure DDos Protection. Protection is simple to enable on any new or existing virtual network, and it requires no application or resource changes. For more information about Azure DDoS protection, see [What is Azure DDoS Protection?](../ddos-protection/ddos-protection-overview.md)
50
+
After you create your virtual network, you can optionally configure Azure DDoS Protection. Protection is simple to enable on any new or existing virtual network, and it requires no application or resource changes. For more information about Azure DDoS Protection, see [What is Azure DDoS Protection?](../ddos-protection/ddos-protection-overview.md).
51
51
52
52
## Create a gateway subnet
53
53
54
-
The virtual network gateway requires a specific subnet named **GatewaySubnet**. The gateway subnet is part of IP address range for your virtual network and contains the IP addresses that the virtual network gateway resources and services use. Specify a gateway subnet that is /27 or larger.
54
+
The virtual network gateway requires a specific subnet named **GatewaySubnet**. The gateway subnet is part of the IP address range for your virtual network and contains the IP addresses that the virtual network gateway resources and services use. Specify a gateway subnet that's /27 or larger.
In this step, you create the virtual network gateway (VPN gateway) for your VNet. Creating a gateway can often take 45 minutes or more, depending on the selected gateway SKU.
60
+
In this step, you create the virtual network gateway (VPN gateway) for your virtual network. Creating a gateway can often take 45 minutes or more, depending on the selected gateway SKU.
61
61
62
-
Create a virtual network gateway using the following values:
62
+
Create a virtual network gateway by using the following values:
63
63
64
-
***Name:** VNet1GW
65
-
***Region:** East US
66
-
***Gateway type:** VPN
67
-
***SKU:** VpnGw2
68
-
***Generation:** Generation 2
69
-
***Virtual network:** VNet1
70
-
***Gateway subnet address range:** 10.1.255.0/27
71
-
***Public IP address:** Create new
72
-
***Public IP address name:** VNet1GWpip
64
+
***Name**: VNet1GW
65
+
***Region**: East US
66
+
***Gateway type**: VPN
67
+
***SKU**: VpnGw2
68
+
***Generation**: Generation 2
69
+
***Virtual network**: VNet1
70
+
***Gateway subnet address range**: 10.1.255.0/27
71
+
***Public IP address**: Create new
72
+
***Public IP address name**: VNet1GWpip
73
73
74
-
For this exercise, we won't be selecting a zoneredundant SKU. If you want to learn about zone-redundant SKUs, see [About zone-redundant VNet gateways](about-zone-redundant-vnet-gateways.md).
74
+
For this exercise, you won't select a zone-redundant SKU. If you want to learn about zone-redundant SKUs, see [About zone-redundant virtual network gateways](about-zone-redundant-vnet-gateways.md).
75
75
76
76
[!INCLUDE [Create a vpn gateway](../../includes/vpn-gateway-add-gw-portal-include.md)]
A gateway can take 45 minutes or more to fully create and deploy. You can see the deployment status on the **Overview** page for your gateway. After the gateway is created, you can view the IP address that has been assigned to it by looking at the VNet in the portal. The gateway appears as a connected device.
79
+
A gateway can take 45 minutes or more to fully create and deploy. You can see the deployment status on the **Overview** page for your gateway. After the gateway is created, you can view the IP address assigned to it by looking at the virtual network in the portal. The gateway appears as a connected device.
You can view the gateway public IP address on the **Overview** page for your gateway. The public IP address is used when you configure a site-to-site connection to your VPN gateway.
86
86
87
-
:::image type="content" source="./media/tutorial-create-gateway-portal/address.png" alt-text="Screenshot of Overview page used to view the Public IP address field." lightbox="./media/tutorial-create-gateway-portal/address.png":::
87
+
:::image type="content" source="./media/tutorial-create-gateway-portal/address.png" alt-text="Screenshot that shows the Overview page used to view the Public IP address field." lightbox="./media/tutorial-create-gateway-portal/address.png":::
88
88
89
-
To see additional information about the public IP address object, select the name/IP address link next to **Public IP address**.
89
+
To see more information about the public IP address object, select the name/IP address link next to **Public IP address**.
90
90
91
91
## <aname="resize"></a>Resize a gateway SKU
92
92
93
-
There are specific rules regarding resizing vs. changing a gateway SKU. In this section, we'll resize the SKU. For more information, see [Resize or change gateway SKUs](about-gateway-skus.md#resizechange).
93
+
There are specific rules for resizing versus changing a gateway SKU. In this section, you resize the SKU. For more information, see [Resize or change gateway SKUs](about-gateway-skus.md#resizechange).
94
94
95
95
[!INCLUDE [resize a gateway](../../includes/vpn-gateway-resize-gw-portal-include.md)]
96
96
@@ -101,7 +101,7 @@ There are specific rules regarding resizing vs. changing a gateway SKU. In this
101
101
## Clean up resources
102
102
103
103
If you're not going to continue to use this application or go to the next tutorial, delete
104
-
these resources using the following steps:
104
+
these resources.
105
105
106
106
1. Enter the name of your resource group in the **Search** box at the top of the portal and select it from the search results.
107
107
@@ -111,10 +111,10 @@ these resources using the following steps:
111
111
112
112
## Next steps
113
113
114
-
Once you've created a VPN gateway, you can configure additional gateway settings and connections. The following articles help you create a few of the most common configurations:
114
+
After you create a VPN gateway, you can configure more gateway settings and connections. The following articles help you create a few of the most common configurations:
Copy file name to clipboardExpand all lines: includes/vpn-gateway-add-gw-pip-portal-include.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,16 +7,16 @@
7
7
8
8
# The numbers in this include are correct. They add on to sections in multiple articles that are already numbered.
9
9
---
10
-
3. Specify in the values for **Public IP address**. These settings specify the public IP address object that gets associated to the VPN gateway. The public IP address is assigned to this object when the VPN gateway is created. The only time the primary public IP address changes is when the gateway is deleted and re-created. It doesn't change across resizing, resetting, or other internal maintenance/upgrades of your VPN gateway.
10
+
3. Specify the values for **Public IP address**. These settings specify the public IP address object that gets associated to the VPN gateway. The public IP address is assigned to this object when the VPN gateway is created. The only time the primary public IP address changes is when the gateway is deleted and re-created. It doesn't change across resizing, resetting, or other internal maintenance/upgrades of your VPN gateway.
11
11
12
-
:::image type="content" source="./media/vpn-gateway-add-gw-pip-portal/pip-values.png" alt-text="Screenshot of public IP address field." lightbox="./media/vpn-gateway-add-gw-pip-portal/pip-values.png":::
12
+
:::image type="content" source="./media/vpn-gateway-add-gw-pip-portal/pip-values.png" alt-text="Screenshot that shows the Public IP address field." lightbox="./media/vpn-gateway-add-gw-pip-portal/pip-values.png":::
13
13
14
14
***Public IP address type**: For this exercise, if you have the option to choose the address type, select **Standard**.
15
15
***Public IP address**: Leave **Create new** selected.
16
-
***Public IP address name**: In the text box, type a name for your public IP address instance.
16
+
***Public IP address name**: In the text box, enter a name for your public IP address instance.
17
17
***Public IP address SKU**: Setting is autoselected.
18
-
***Assignment**: The assignment is typically autoselected and can be either Dynamic or Static.
18
+
***Assignment**: The assignment is typically autoselected and can be either **Dynamic** or **Static**.
19
19
***Enable active-active mode**: Select **Disabled**. Only enable this setting if you're creating an active-active gateway configuration.
20
20
***Configure BGP**: Select **Disabled**, unless your configuration specifically requires this setting. If you do require this setting, the default ASN is 65515, although this value can be changed.
21
21
4. Select **Review + create** to run validation.
22
-
5.Once validation passes, select **Create** to deploy the VPN gateway.
22
+
5.After validation passes, select **Create** to deploy the VPN gateway.
Copy file name to clipboardExpand all lines: includes/vpn-gateway-add-gw-portal-include.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,24 +6,24 @@
6
6
ms.author: cherylmc
7
7
---
8
8
9
-
1. In **Search resources, services, and docs (G+/)** type**virtual network gateway**. Locate **Virtual network gateway** in the Marketplace search results and select it to open the **Create virtual network gateway** page.
9
+
1. In **Search resources, services, and docs (G+/)**, enter**virtual network gateway**. Locate **Virtual network gateway** in the **Marketplace** search results and select it to open the **Create virtual network gateway** page.
10
10
11
-
:::image type="content" source="./media/vpn-gateway-add-gw-portal/search.png" alt-text="Screenshot of Search field." lightbox="./media/vpn-gateway-add-gw-portal/search-expand.png":::
11
+
:::image type="content" source="./media/vpn-gateway-add-gw-portal/search.png" alt-text="Screenshot that shows the Search field." lightbox="./media/vpn-gateway-add-gw-portal/search-expand.png":::
12
12
13
13
1. On the **Basics** tab, fill in the values for **Project details** and **Instance details**.
14
14
15
-
:::image type="content" source="./media/vpn-gateway-add-gw-portal/instance-details.png" alt-text="Screenshot of Instance fields." lightbox="./media/vpn-gateway-add-gw-portal/instance-details.png":::
15
+
:::image type="content" source="./media/vpn-gateway-add-gw-portal/instance-details.png" alt-text="Screenshot that shows the Instance fields." lightbox="./media/vpn-gateway-add-gw-portal/instance-details.png":::
16
16
17
-
***Subscription**: Select the subscription you want to use from the dropdown.
18
-
***Resource Group**: This setting is autofilled when you select your virtual network on this page.
19
-
***Name**: Name your gateway. Naming your gateway not the same as naming a gateway subnet. It's the name of the gateway object you're creating.
17
+
***Subscription**: Select the subscription you want to use from the dropdown list.
18
+
***Resource group**: This setting is autofilled when you select your virtual network on this page.
19
+
***Name**: Name your gateway. Naming your gateway isn't the same as naming a gateway subnet. It's the name of the gateway object you're creating.
20
20
***Region**: Select the region in which you want to create this resource. The region for the gateway must be the same as the virtual network.
21
21
***Gateway type**: Select **VPN**. VPN gateways use the virtual network gateway type **VPN**.
22
-
***SKU**: From the dropdown, select the gateway SKU that supports the features you want to use. See [Gateway SKUs](../articles/vpn-gateway/vpn-gateway-about-vpn-gateway-settings.md#gwsku). In the portal, the SKUs available in the dropdown depend on the `VPN type` you select. [!INCLUDE [Basic SKU](vpn-gateway-basic-sku.md)]
22
+
***SKU**: From the dropdown list, select the gateway SKU that supports the features you want to use. See [Gateway SKUs](../articles/vpn-gateway/vpn-gateway-about-vpn-gateway-settings.md#gwsku). In the portal, the SKUs available in the dropdown list depend on the `VPN type` you select. [!INCLUDE [Basic SKU](vpn-gateway-basic-sku.md)]
23
23
***Generation**: Select the generation you want to use. We recommend using a Generation2 SKU. For more information, see [Gateway SKUs](../articles/vpn-gateway/vpn-gateway-about-vpngateways.md#gwsku).
24
-
***Virtual network**: From the dropdown, select the virtual network to which you want to add this gateway. If you can't see the virtual network for which you want to create a gateway, make sure you selected the correct subscription and region in the previous settings.
24
+
***Virtual network**: From the dropdown list, select the virtual network to which you want to add this gateway. If you can't see the virtual network for which you want to create a gateway, make sure you selected the correct subscription and region in the previous settings.
25
25
***Gateway subnet address range** or **Subnet**: The gateway subnet is required to create a VPN gateway.
26
26
27
27
At this time, this field has a couple of different behaviors, depending on the virtual network address space and whether you already created a subnet named **GatewaySubnet** for your virtual network.
28
28
29
-
If you don't have a gateway subnet AND you don't see the option to create one on this page, go back to your virtual network and create the gateway subnet. Then, return to this page and configure the VPN gateway.
29
+
If you don't have a gateway subnet *and* you don't see the option to create one on this page, go back to your virtual network and create the gateway subnet. Then, return to this page and configure the VPN gateway.
0 commit comments