Skip to content

Commit 42bb4bd

Browse files
committed
edit pass: vpn-gateway-vpn-faq
1 parent 8d16431 commit 42bb4bd

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

articles/vpn-gateway/vpn-gateway-vpn-faq.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Azure VPN Gateway FAQ
3-
description: Learn about frequently asked questions for VPN Gateway cross-premises connections, hybrid configuration connections, and virtual network gateways. This FAQ contains comprehensive information about point-to-site, site-to-site, and network-to-network configuration settings.
3+
description: Learn about frequently asked questions for VPN Gateway cross-premises connections, hybrid configuration connections, and virtual network gateways. This FAQ contains comprehensive information about point-to-site, site-to-site, and VNet-to-VNet configuration settings.
44
author: cherylmc
55
ms.service: vpn-gateway
66
ms.topic: conceptual
@@ -16,19 +16,19 @@ This article answers frequently asked questions about Azure VPN Gateway connecti
1616

1717
### Can I connect virtual networks in different Azure regions?
1818

19-
Yes. There's no region constraint. One virtual network can connect to another virtual network in the same region or in a different Azure region.
19+
Yes. There's no region constraint. One virtual network (VNet) can connect to another virtual network in the same region or in a different Azure region.
2020

2121
### Can I connect virtual networks in different subscriptions?
2222

2323
Yes.
2424

25-
### Can I specify private DNS servers in my virtual network when configuring a VPN gateway?
25+
### Can I specify private DNS servers in my VNet when configuring a VPN gateway?
2626

2727
If you specified a DNS server or servers when you created your virtual network, the VPN gateway uses the DNS servers that you specified. If you specify a DNS server, verify that your DNS server can resolve the domain names needed for Azure.
2828

2929
### Can I connect to multiple sites from a single virtual network?
3030

31-
You can connect to multiple sites by using Windows PowerShell and the Azure REST APIs. See the [Multi-site and network-to-network connectivity](#V2VMulti) FAQ section.
31+
You can connect to multiple sites by using Windows PowerShell and the Azure REST APIs. See the [Multi-site and VNet-to-VNet connectivity](#V2VMulti) FAQ section.
3232

3333
### Is there an additional cost for setting up a VPN gateway as active-active?
3434

@@ -40,7 +40,7 @@ The following cross-premises virtual network gateway connections are supported:
4040

4141
* **Site-to-site (S2S)**: VPN connection over IPsec (IKEv1 and IKEv2). This type of connection requires a VPN device or Windows Server Routing and Remote Access. For more information, see [Create a site-to-site VPN connection in the Azure portal](./tutorial-site-to-site-portal.md).
4242
* **Point-to-site (P2S)**: VPN connection over Secure Socket Tunneling Protocol (SSTP) or IKEv2. This connection doesn't require a VPN device. For more information, see [Configure server settings for point-to-site VPN Gateway certificate authentication](vpn-gateway-howto-point-to-site-resource-manager-portal.md).
43-
* **Network-to-network**: This type of connection is the same as a site-to-site configuration. A connection between virtual networks is a VPN connection over IPsec (IKEv1 and IKEv2). It doesn't require a VPN device. For more information, see the [Configure a network-to-network VPN gateway connection](vpn-gateway-howto-vnet-vnet-resource-manager-portal.md).
43+
* **VNet-to-VNet**: This type of connection is the same as a site-to-site configuration. VNet-to-VNet is a VPN connection over IPsec (IKEv1 and IKEv2). It doesn't require a VPN device. For more information, see the [Configure a VNet-to-VNet VPN gateway connection](vpn-gateway-howto-vnet-vnet-resource-manager-portal.md).
4444
* **Azure ExpressRoute**: ExpressRoute is a private connection to Azure from your wide area network, not a VPN connection over the public internet. For more information, see the [ExpressRoute technical overview](../expressroute/expressroute-introduction.md) and the [ExpressRoute FAQ](../expressroute/expressroute-faqs.md).
4545

4646
For more information about VPN gateway connections, see [What is Azure VPN Gateway?](vpn-gateway-about-vpngateways.md).
@@ -61,13 +61,13 @@ You can configure your virtual network to use both site-to-site and point-to-sit
6161

6262
### Does a misconfiguration of custom DNS break the normal operation of a VPN gateway?
6363

64-
For normal functioning, the VPN gateway must establish a secure connection with the Azure control plane, facilitated through public IP addresses. This connection relies on resolving communication endpoints via public URLs. By default, Azure virtual networks use the built-in Azure DNS service (168.63.129.16) to resolve these public URLs. This default behavior helps ensure seamless communication between the VPN gateway and the Azure control plane.
64+
For normal functioning, the VPN gateway must establish a secure connection with the Azure control plane, facilitated through public IP addresses. This connection relies on resolving communication endpoints via public URLs. By default, Azure VNets use the built-in Azure DNS service (168.63.129.16) to resolve these public URLs. This default behavior helps ensure seamless communication between the VPN gateway and the Azure control plane.
6565

66-
When you're implementing a custom DNS within the virtual network, it's crucial to configure a DNS forwarder that points to the Azure DNS (168.63.129.16), to maintain uninterrupted communication between the VPN gateway and control plane. Failure to set up a DNS forwarder to Azure DNS can prevent Microsoft from performing operations and maintenance on the VPN gateway, which poses a security risk.
66+
When you're implementing a custom DNS within the VNet, it's crucial to configure a DNS forwarder that points to the Azure DNS (168.63.129.16), to maintain uninterrupted communication between the VPN gateway and control plane. Failure to set up a DNS forwarder to Azure DNS can prevent Microsoft from performing operations and maintenance on the VPN gateway, which poses a security risk.
6767

68-
To help ensure proper functionality and healthy state for your VPN gateway, consider one of the following DNS configurations in the virtual network:
68+
To help ensure proper functionality and healthy state for your VPN gateway, consider one of the following DNS configurations in the VNet:
6969

70-
* Revert to the Azure DNS default by removing the custom DNS within the virtual network settings (recommended configuration).
70+
* Revert to the Azure DNS default by removing the custom DNS within the VNet settings (recommended configuration).
7171
* Add in your custom DNS configuration a DNS forwarder that points to Azure DNS (168.63.129.16). Considering the specific rules and nature of your custom DNS, this setup might not resolve the issue as expected.
7272

7373
### Can two VPN clients connected in point-to-site to the same VPN gateway communicate?
@@ -300,7 +300,7 @@ Yes, RADIUS authentication is supported for both IKEv2 and SSTP VPN.
300300

301301
RADIUS authentication is supported for the OpenVPN protocol.
302302

303-
## <a name="V2VMulti"></a>Network-to-network and multi-site connections
303+
## <a name="V2VMulti"></a>VNet-to-VNet and multi-site connections
304304

305305
[!INCLUDE [vpn-gateway-vnet-vnet-faq-include](../../includes/vpn-gateway-faq-vnet-vnet-include.md)]
306306

0 commit comments

Comments
 (0)