You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/vpn-gateway/create-routebased-vpn-gateway-powershell.md
+6-4Lines changed: 6 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,23 +6,25 @@ author: cherylmc
6
6
7
7
ms.service: vpn-gateway
8
8
ms.topic: article
9
-
ms.date: 02/11/2019
9
+
ms.date: 02/10/2020
10
10
ms.author: cherylmc
11
11
---
12
12
13
13
# Create a route-based VPN gateway using PowerShell
14
14
15
15
This article helps you quickly create a route-based Azure VPN gateway using PowerShell. A VPN gateway is used when creating a VPN connection to your on-premises network. You can also use a VPN gateway to connect VNets.
16
16
17
+
## Before you begin
18
+
17
19
The steps in this article will create a VNet, a subnet, a gateway subnet, and a route-based VPN gateway (virtual network gateway). Once the gateway creation has completed, you can then create connections. These steps require an Azure subscription. If you don't have an Azure subscription, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
Create an Azure resource group with [New-AzResourceGroup](/powershell/module/az.resources/new-azresourcegroup). A resource group is a logical container into which Azure resources are deployed and managed.
27
+
Create an Azure resource group with [New-AzResourceGroup](/powershell/module/az.resources/new-azresourcegroup). A resource group is a logical container into which Azure resources are deployed and managed. Create a resource group. If you are running PowerShell locally, open your PowerShell console with elevated privileges and connect to Azure using the `Connect-AzAccount` command.
You can use either PowerShell installed locally on your computer, or the Azure Cloud Shell. If you choose to install and use the PowerShell locally, this feature requires the latest version of the PowerShell module.
If you are using PowerShell locally on your computer, rather than using Cloud Shell, you must install PowerShell module 1.0.0 or higher. To check the version of PowerShell that you have installed, use the following command:
29
-
30
-
```azurepowershell
31
-
Get-Module Az -ListAvailable | Select-Object -Property Name,Version,Path
32
-
```
33
-
34
-
If you need to upgrade, see [Install Azure PowerShell module](/powershell/azure/install-az-ps).
## <aname="variables"></a>1. Declare your variables
39
23
40
-
The values used for the example steps are listed below. Additionally, some of the examples use declared variables within the steps. If you are using these steps in your own environment, be sure to replace these values with your own. When specifying location, verify that the region you specify is supported. For more information, see the [FAQ](#faq).
24
+
Declare the variables that you want to use. Use the following sample, substituting the values for your own when necessary. If you close your PowerShell/Cloud Shell session at any point during the exercise, just copy and paste the values again to re-declare the variables. When specifying location, verify that the region you specify is supported. For more information, see the [FAQ](#faq).
Copy file name to clipboardExpand all lines: articles/vpn-gateway/point-to-site-how-to-radius-ps.md
+10-15Lines changed: 10 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: cherylmc
6
6
7
7
ms.service: vpn-gateway
8
8
ms.topic: conceptual
9
-
ms.date: 02/27/2019
9
+
ms.date: 02/10/2020
10
10
ms.author: cherylmc
11
11
12
12
---
@@ -39,8 +39,6 @@ P2S connections require the following:
39
39
* A RADIUS server to handle user authentication. The RADIUS server can be deployed on-premises, or in the Azure VNet.
40
40
* A VPN client configuration package for the Windows devices that will connect to the VNet. A VPN client configuration package provides the settings required for a VPN client to connect over P2S.
## <aname="aboutad"></a>About Active Directory (AD) Domain Authentication for P2S VPNs
45
43
46
44
AD Domain authentication allows users to sign in to Azure using their organization domain credentials. It requires a RADIUS server that integrates with the AD server. Organizations can also leverage their existing RADIUS deployment.
@@ -60,6 +58,8 @@ Apart from Active Directory, a RADIUS server can also integrate with other exter
60
58
61
59
Verify that you have an Azure subscription. If you don't already have an Azure subscription, you can activate your [MSDN subscriber benefits](https://azure.microsoft.com/pricing/member-offers/msdn-benefits-details) or sign up for a [free account](https://azure.microsoft.com/pricing/free-trial).
Declare the variables that you want to use. Use the following sample, substituting the values for your own when necessary. If you close your PowerShell/Cloud Shell session at any point during the exercise, just copy and paste the values again to re-declare the variables.
94
89
@@ -110,7 +105,7 @@ Declare the variables that you want to use. Use the following sample, substituti
110
105
$GWIPconfName = "gwipconf"
111
106
```
112
107
113
-
## 1. <aname="vnet"></a>Create the resource group, VNet, and Public IP address
108
+
## 2. <aname="vnet"></a>Create the resource group, VNet, and Public IP address
114
109
115
110
The following steps create a resource group and a virtual network in the resource group with three subnets. When substituting values, it's important that you always name your gateway subnet specifically 'GatewaySubnet'. If you name it something else, your gateway creation fails;
116
111
@@ -144,7 +139,7 @@ The following steps create a resource group and a virtual network in the resourc
## 2. <aname="radius"></a>Set up your RADIUS server
142
+
## 3. <aname="radius"></a>Set up your RADIUS server
148
143
149
144
Before creating and configuring the virtual network gateway, your RADIUS server should be configured correctly for authentication.
150
145
@@ -154,7 +149,7 @@ Before creating and configuring the virtual network gateway, your RADIUS server
154
149
155
150
The [Network Policy Server (NPS)](https://docs.microsoft.com/windows-server/networking/technologies/nps/nps-top) article provides guidance about configuring a Windows RADIUS server (NPS) for AD domain authentication.
156
151
157
-
## 3. <aname="creategw"></a>Create the VPN gateway
152
+
## 4. <aname="creategw"></a>Create the VPN gateway
158
153
159
154
Configure and create the VPN gateway for your VNet.
## 4. <aname="addradius"></a>Add the RADIUS server and client address pool
165
+
## 5. <aname="addradius"></a>Add the RADIUS server and client address pool
171
166
172
167
* The -RadiusServer can be specified by name or by IP address. If you specify the name and the server resides on-premises, then the VPN gateway may not be able to resolve the name. If that’s the case, then it's better to specify the IP address of the server.
173
168
* The -RadiusSecret should match what is configured on your RADIUS server.
## 5. <a name="vpnclient"></a>Download the VPN client configuration package and set up the VPN client
222
+
## 6. <a name="vpnclient"></a>Download the VPN client configuration package and set up the VPN client
228
223
229
224
The VPN client configuration lets devices connect to a VNet over a P2S connection. To generate a VPN client configuration package and set up the VPN client, see [Create a VPN Client Configuration for RADIUS authentication](point-to-site-vpn-client-configuration-radius.md).
| Select **Try It** in the upper-right corner of a code block. This __doesn't__ automatically copy text to Cloud Shell. ||
25
-
| Open [shell.azure.com](https://shell.azure.com) in your browser. |[](https://shell.azure.com)|
26
-
| Select the **Cloud Shell** button on the menu in the upper-right corner of the [Azure portal](https://portal.azure.com). ||
27
-
28
-
**Running PowerShell locally**
29
-
30
-
You can also install and run the Azure PowerShell cmdlets locally on your computer. PowerShell cmdlets are updated frequently. If you are not running the latest version, the values specified in the instructions may fail. To find the versions of Azure PowerShell installed on your computer, use the `Get-Module -ListAvailable Az` cmdlet. To install or update, see [Install the Azure PowerShell module](/powershell/azure/install-az-ps).
31
-
32
-
If you are running PowerShell locally, be sure to run 'Connect-AzAccount' to create your connection to Azure.
18
+
If you are using Azure CloudShell, you are connected to your account automatically and do not need to run the Connect-AzAccount command. If you are running PowerShell locally, open your PowerShell console with elevated privileges and connect to Azure using the `Connect-AzAccount` command.
Copy file name to clipboardExpand all lines: includes/vpn-gateway-connect-vm-p2s-include.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,7 +17,7 @@ You can connect to a VM that is deployed to your VNet by creating a Remote Deskt
17
17
18
18
- PowerShell - Use the example to view a list of VMs and private IP addresses from your resource groups. You don't need to modify this example before using it.
19
19
20
-
```powershell
20
+
```azurepowershell-interactive
21
21
$VMs = Get-AzVM
22
22
$Nics = Get-AzNetworkInterface | Where VirtualMachine -ne $null
You can also install and run the Azure PowerShell cmdlets locally on your computer. PowerShell cmdlets are updated frequently. If you are not running the latest version, the values specified in the instructions may fail. To find the versions of Azure PowerShell installed on your computer, use the `Get-Module -ListAvailable Az` cmdlet. To install or update, see [Install the Azure PowerShell module](/powershell/azure/install-az-ps).
0 commit comments