|
1 | 1 | ---
|
2 |
| -title: 'Remote work and Point-to-Site VPN gateways' |
| 2 | +title: 'Remote work and point-to-site VPN gateways' |
3 | 3 | titleSuffix: Azure VPN Gateway
|
4 |
| -description: Learn how you can use VPN Gateway point-to-site connections in order to work remotely due to the COVID-19 pandemic. |
| 4 | +description: Learn how you can use VPN Gateway point-to-site connections in order to work remotely. |
5 | 5 | author: cherylmc
|
6 | 6 | ms.service: vpn-gateway
|
7 | 7 | ms.topic: conceptual
|
8 |
| -ms.date: 03/12/2024 |
| 8 | +ms.date: 07/10/2024 |
9 | 9 | ms.author: cherylmc
|
10 | 10 |
|
11 | 11 | ---
|
12 |
| -# Remote work using Azure VPN Gateway Point-to-site |
| 12 | +# Remote work using Azure VPN Gateway VPN connections |
13 | 13 |
|
14 |
| ->[!NOTE] |
15 |
| ->This article describes how you can leverage Azure VPN Gateway, Azure, Microsoft network, and the Azure partner ecosystem to work remotely and mitigate network issues that you are facing because of COVID-19 crisis. |
16 |
| -> |
| 14 | +This article describes the options that are available to organizations to set up remote access for their users or to supplement their existing solutions with additional capacity. The Azure VPN Gateway point-to-site VPN solution is cloud-based and can be provisioned quickly to cater for the increased demand of users to work from home. It can scale up easily and turned off just as easily and quickly when the increased capacity isn't needed anymore. |
17 | 15 |
|
18 |
| -This article describes the options that are available to organizations to set up remote access for their users or to supplement their existing solutions with additional capacity during the COVID-19 epidemic. |
| 16 | +## <a name="p2s"></a>About point-to-site VPN |
19 | 17 |
|
20 |
| -The Azure point-to-site solution is cloud-based and can be provisioned quickly to cater for the increased demand of users to work from home. It can scale up easily and turned off just as easily and quickly when the increased capacity isn't needed anymore. |
21 |
| - |
22 |
| -## <a name="p2s"></a>About Point-to-Site VPN |
23 |
| - |
24 |
| -A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer. A P2S connection is established by starting it from the client computer. This solution is useful for telecommuters who want to connect to Azure VNets or on-premises data centers from a remote location, such as from home or a conference. This article describes how to enable users to work remotely based on various scenarios. |
| 18 | +A point-to-site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer. A P2S connection is established by starting it from the client computer. This solution is useful for telecommuters who want to connect to Azure VNets or on-premises data centers from a remote location, such as from home or a conference. For more information about Azure point-to-site VPN, see [About VPN Gateway point-to-site VPN](point-to-site-about.md) and the [VPN Gateway FAQ](vpn-gateway-vpn-faq.md). |
25 | 19 |
|
26 | 20 | The following table shows the client operating systems and the authentication options that are available to them. It would be helpful to select the authentication method based on the client OS that is already in use. For example, select OpenVPN with Certificate-based authentication if you have a mixture of client operating systems that need to connect. Also, note that point-to-site VPN is only supported on route-based VPN gateways.
|
27 | 21 |
|
28 |
| - |
| 22 | +[!INCLUDE [All client articles](../../includes/vpn-gateway-vpn-client-install-articles.md)] |
29 | 23 |
|
30 | 24 | ## <a name="scenario1"></a>Scenario 1 - Users need access to resources in Azure only
|
31 | 25 |
|
32 | 26 | In this scenario, the remote users only need to access to resources that are in Azure.
|
33 | 27 |
|
34 |
| - |
| 28 | +:::image type="content" source="./media/working-remotely-support/scenario1.png" alt-text="Diagram that shows a point-to-site scenario for users that need access to resources in Azure only." lightbox="./media/working-remotely-support/scenario1.png"::: |
35 | 29 |
|
36 | 30 | At a high level, the following steps are needed to enable users to connect to Azure resources securely:
|
37 | 31 |
|
38 | 32 | 1. Create a virtual network gateway (if one doesn't exist).
|
39 |
| -2. Configure point-to-site VPN on the gateway. |
| 33 | +1. Configure point-to-site VPN on the gateway. |
40 | 34 |
|
41 |
| - * For certificate authentication, follow [this link](vpn-gateway-howto-point-to-site-resource-manager-portal.md#creategw). |
42 |
| - * For OpenVPN, follow [this link](vpn-gateway-howto-openvpn.md). |
43 |
| - * For Microsoft Entra authentication, follow [this link](openvpn-azure-ad-tenant.md). |
44 |
| - * For troubleshooting point-to-site connections, follow [this link](vpn-gateway-troubleshoot-vpn-point-to-site-connection-problems.md). |
45 |
| -3. Download and distribute the VPN client configuration. |
46 |
| -4. Distribute the certificates (if certificate authentication is selected) to the clients. |
47 |
| -5. Connect to Azure VPN. |
| 35 | + * For certificate authentication, see [Configure point-to-site certificate authentication](vpn-gateway-howto-point-to-site-resource-manager-portal.md). |
| 36 | + * For Microsoft Entra ID authentication, see [Configure point-to-site Microsoft Entra ID authentication](point-to-site-entra-gateway.md) |
| 37 | + * For troubleshooting point-to-site connections, see [Troubleshooting: Azure point-to-site connection problems](vpn-gateway-troubleshoot-vpn-point-to-site-connection-problems.md). |
| 38 | +1. Download and distribute the VPN client configuration. |
| 39 | +1. Distribute the certificates (if certificate authentication is selected) to the clients. |
| 40 | +1. Connect to Azure VPN. |
48 | 41 |
|
49 | 42 | ## <a name="scenario2"></a>Scenario 2 - Users need access to resources in Azure and/or on-premises resources
|
50 | 43 |
|
51 | 44 | In this scenario, the remote users need to access to resources that are in Azure and in the on premises data center(s).
|
52 | 45 |
|
53 |
| - |
| 46 | +:::image type="content" source="./media/working-remotely-support/scenario2.png" alt-text="Diagram that shows a point-to-site scenario for users that need access to resources in Azure." lightbox="./media/working-remotely-support/scenario2.png"::: |
54 | 47 |
|
55 | 48 | At a high level, the following steps are needed to enable users to connect to Azure resources securely:
|
56 | 49 |
|
57 | 50 | 1. Create a virtual network gateway (if one doesn't exist).
|
58 |
| -2. Configure point-to-site VPN on the gateway (see [Scenario 1](#scenario1)). |
59 |
| -3. Configure a site-to-site tunnel on the Azure virtual network gateway with BGP enabled. |
60 |
| -4. Configure the on-premises device to connect to Azure virtual network gateway. |
61 |
| -5. Download the point-to-site profile from the Azure portal and distribute to clients |
62 |
| - |
63 |
| -To learn how to set up a site-to-site VPN tunnel, see [this link](./tutorial-site-to-site-portal.md). |
64 |
| - |
65 |
| -## <a name="faqcert"></a>FAQ for native Azure certificate authentication |
| 51 | +1. Configure point-to-site VPN on the gateway (see [Scenario 1](#scenario1)). |
| 52 | +1. Configure a site-to-site tunnel on the Azure virtual network gateway with BGP enabled. |
| 53 | +1. Configure the on-premises device to connect to Azure virtual network gateway. |
| 54 | +1. Download the point-to-site profile from the Azure portal and distribute to clients |
66 | 55 |
|
67 |
| -[!INCLUDE [vpn-gateway-point-to-site-faq-include](../../includes/vpn-gateway-faq-p2s-azurecert-include.md)] |
68 |
| - |
69 |
| -## <a name="faqradius"></a>FAQ for RADIUS authentication |
70 |
| - |
71 |
| -[!INCLUDE [vpn-gateway-point-to-site-faq-include](../../includes/vpn-gateway-faq-p2s-radius-include.md)] |
| 56 | +To learn how to set up a site-to-site VPN tunnel, see [Create a site-to-site VPN connection](./tutorial-site-to-site-portal.md). |
72 | 57 |
|
73 | 58 | ## Next Steps
|
74 | 59 |
|
75 |
| -* [Configure a P2S connection - Microsoft Entra authentication](openvpn-azure-ad-tenant.md) |
76 |
| - |
| 60 | +* [Configure a P2S connection - Microsoft Entra ID authentication](point-to-site-entra-gateway.md) |
| 61 | +* [Configure a P2S connection - Certificate authentication](vpn-gateway-howto-point-to-site-resource-manager-portal.md) |
77 | 62 | * [Configure a P2S connection - RADIUS authentication](point-to-site-how-to-radius-ps.md)
|
78 |
| - |
79 |
| -* [Configure a P2S connection - Azure native certificate authentication](vpn-gateway-howto-point-to-site-rm-ps.md) |
| 63 | +* [About VPN Gateway point-to-site VPN](point-to-site-about.md) |
| 64 | +* [About point-to-site VPN routing](vpn-gateway-about-point-to-site-routing.md) |
80 | 65 |
|
81 | 66 | **"OpenVPN" is a trademark of OpenVPN Inc.**
|
0 commit comments