Skip to content

Commit 34f6f69

Browse files
committed
Quality reivew and fix. No technical change
1 parent 1b3a6ad commit 34f6f69

File tree

1 file changed

+7
-9
lines changed

1 file changed

+7
-9
lines changed

articles/azure-stack/azure-stack-vpn-gateway-settings.md

Lines changed: 7 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ ms.author: brenduns
2323

2424
A VPN gateway is a type of virtual network gateway that sends encrypted traffic between your virtual network in Azure Stack and a remote VPN gateway. The remote VPN gateway can be in Azure, a device in your datacenter or a device in another site. If there is network connectivity between the two endpoints, you can establish a secure Site-to-Site (S2S) VPN connection between the two networks.
2525

26-
A VPN gateway connection relies on the configuration of multiple resources, each of which contains configurable settings. The sections in this article discuss the resources and settings that relate to a VPN gateway for a virtual network created in Resource Manager deployment model. You can find descriptions and topology diagrams for each connection solution in [About VPN Gateway for Azure Stack](azure-stack-vpn-gateway-about-vpn-gateways.md).
26+
A VPN gateway connection relies on the configuration of multiple resources, each of which contains configurable settings. This article discusses the resources and settings that relate to a VPN gateway for a virtual network that you create in the Resource Manager deployment model. You can find descriptions and topology diagrams for each connection solution in [About VPN Gateway for Azure Stack](azure-stack-vpn-gateway-about-vpn-gateways.md).
2727

2828
## VPN gateway settings
2929

@@ -96,7 +96,7 @@ When you create the virtual network gateway for a VPN gateway configuration, you
9696
>
9797
> In addition, Azure Stack doesn't support using Policy Based Traffic Selectors for Route Based Gateways at this time, because custom IPSec/IKE policy configurations aren't supported.
9898
99-
* **PolicyBased**: Policy-based VPNs encrypt and direct packets through IPsec tunnels based on the IPsec policies that are configured with the combinations of address prefixes between your on-premises network and the Azure Stack VNet. The policy, or traffic selector, is usually defined as an access list in the VPN device configuration.
99+
* **PolicyBased**: Policy-based VPNs encrypt and direct packets through IPsec tunnels based on the IPsec policies that are configured with the combinations of address prefixes between your on-premises network and the Azure Stack VNet. The policy, or traffic selector, is usually an access list in the VPN device configuration.
100100

101101
>[!NOTE]
102102
>PolicyBased is supported in Azure, but not in Azure Stack.
@@ -159,7 +159,7 @@ Sometimes you need to modify the local network gateway settings. For example, wh
159159

160160
## IPsec/IKE parameters
161161

162-
When you set up a VPN Connection in Azure Stack, you need to configure the connection at both ends. If you are configuring a VPN Connection between Azure Stack and a hardware device like a switch or router, that is acting as a VPN Gateway, that device may ask you for additional settings.
162+
When you set up a VPN Connection in Azure Stack, you need to configure the connection at both ends. If you are configuring a VPN Connection between Azure Stack and a hardware device like a switch or router that is acting as a VPN Gateway, that device might ask you for additional settings.
163163

164164
Unlike Azure, which supports multiple offers as both an initiator and a responder, Azure Stack supports only one offer.
165165

@@ -180,14 +180,12 @@ Unlike Azure, which supports multiple offers as both an initiator and a responde
180180
|IKE Version |IKEv2 |
181181
|Encryption & Hashing Algorithms (Encryption) | GCMAES256|
182182
|Encryption & Hashing Algorithms (Authentication) | GCMAES256|
183-
|SA Lifetime (Time) | 27,000 seconds<sup>See note 1</sup> |
184-
|SA Lifetime (Bytes) | 33,553,408<sup>See note 2</sup> |
185-
|Perfect Forward Secrecy (PFS) |None<sup>See note 3</sup> |
183+
|SA Lifetime (Time) | 27,000 seconds |
184+
|SA Lifetime (Bytes) | 33,553,408 |
185+
|Perfect Forward Secrecy (PFS) |None<sup>See note 1</sup> |
186186
|Dead Peer Detection | Supported|
187187

188-
* *Note 1:* Prior to version 1803, Azure Stack uses a value of 14,400 for the SA Lifetime (Time).
189-
* *Note 2:* Prior to version 1803, Azure Stack uses a value of 819,200 for the SA Lifetime (Bytes).
190-
* *Note 3:* Prior to version 1807, Azure Stack uses a value of PFS2048 for the Perfect Forward Secrecy (PFS).
188+
* *Note 1:* Prior to version 1807, Azure Stack uses a value of PFS2048 for the Perfect Forward Secrecy (PFS).
191189

192190
## Next steps
193191

0 commit comments

Comments
 (0)