Skip to content

Commit 5e68bea

Browse files
committed
update article for virtual wan and vpn-gateway
update format
1 parent 88c4587 commit 5e68bea

File tree

5 files changed

+94
-57
lines changed

5 files changed

+94
-57
lines changed

articles/virtual-wan/TOC.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -58,9 +58,9 @@
5858
href: certificates-point-to-site.md
5959
- name: Configure Azure AD tenant
6060
href: openvpn-azure-ad-tenant.md
61-
- name: Download a VPN profile
62-
href: ../vpn-gateway/about-vpn-profile-download.md?toc=%2fazure%2fvirtual-wan%2ftoc.json
63-
- name: Download global and hub-based profiles
61+
- name: Client profile
62+
href: about-vpn-profile-download.md
63+
- name: Global and hub-based profile
6464
href: global-hub-profile.md
6565
- name: Configure OpenVPN clients
6666
href: ../vpn-gateway/vpn-gateway-howto-openvpn-clients.md?toc=%2fazure%2fvirtual-wan%2ftoc.json
Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
---
2+
title: 'Azure Virtual WAN: User VPN client profiles'
3+
description: This helps you work with the client profile file
4+
services: virtual-wan
5+
author: cherylmc
6+
7+
ms.service: virtual-wan
8+
ms.topic: article
9+
ms.date: 03/18/2020
10+
ms.author: cherylmc
11+
12+
---
13+
# Working with User VPN client profiles
14+
15+
The downloaded profile file contains information that is necessary to configure a VPN connection. This article will help you obtain and understand the information necessary for a User VPN client profile.
16+
17+
[!INCLUDE [client profiles](../../includes/vpn-gateway-vwan-vpn-profile-download.md)]
18+
19+
* The **OpenVPN folder** contains the *ovpn* profile that needs to be modified to include the key and the certificate. For more information, see [Configure OpenVPN clients](../vpn-gateway/vpn-gateway-howto-openvpn-clients.md#windows).
20+
21+
## Next steps
22+
23+
For more information about Virtual WAN User VPN, see [Create a User VPN connection](virtual-wan-point-to-site-portal.md).

articles/virtual-wan/virtual-wan-point-to-site-azure-ad.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,22 @@
11
---
2-
title: 'Configure Azure AD authentication for Point-to-Site connection to Azure | Microsoft Docs'
3-
description: In this tutorial, learn how to configure Azure Active Directory authentication for User VPN.
2+
title: 'Configure Azure AD authentication for User VPN connection: Virtual WAN'
3+
description: Learn how to configure Azure Active Directory authentication for User VPN.
44
services: virtual-wan
55
author: anzaman
66

77
ms.service: virtual-wan
8-
ms.topic: tutorial
9-
ms.date: 02/07/2019
8+
ms.topic: conceptual
9+
ms.date: 03/17/2020
1010
ms.author: alzam
1111

1212
---
13-
# Tutorial: Create a User VPN connection by using Azure Virtual WAN
13+
# Configure Azure Active Directory authentication for User VPN
1414

15-
This tutorial shows you how to configure Azure AD authentication for User VPN in Virtual WAN to connect to your resources in Azure over an OpenVPN VPN connection. Azure Active Directory authentication is only available for gateways using OpenVPN protocol and clients running Windows.
15+
This article shows you how to configure Azure AD authentication for User VPN in Virtual WAN to connect to your resources in Azure over an OpenVPN VPN connection. Azure Active Directory authentication is only available for gateways using OpenVPN protocol and clients running Windows.
1616

1717
This type of connection requires a client to be configured on the client computer. For more information about Virtual WAN, see the [Virtual WAN Overview](virtual-wan-about.md).
1818

19-
In this tutorial, you learn how to:
19+
In this article, you learn how to:
2020

2121
> [!div class="checklist"]
2222
> * Create a WAN
@@ -122,7 +122,7 @@ Use the VPN profile to configure your clients.
122122
To connect, you need to download the Azure VPN Client and import the VPN client profile that was downloaded in the previous steps on every computer that wants to connect to the VNet.
123123

124124
> [!NOTE]
125-
> Azure AD authentication is supported only for OpenVPN® protocol connections.
125+
> Azure AD authentication is supported only for OpenVPN® protocol connections.
126126
>
127127
128128
#### To download the Azure VPN client

articles/vpn-gateway/about-vpn-profile-download.md

Lines changed: 2 additions & 46 deletions
Original file line numberDiff line numberDiff line change
@@ -6,62 +6,18 @@ author: cherylmc
66

77
ms.service: vpn-gateway
88
ms.topic: article
9-
ms.date: 03/11/2020
9+
ms.date: 03/17/2020
1010
ms.author: cherylmc
1111

1212
---
1313
# About P2S VPN client profiles
1414

1515
The downloaded profile file contains information that is necessary to configure a VPN connection. This article will help you obtain and understand the information necessary for a VPN client profile.
1616

17-
## 1. Download the file
18-
19-
Run the following commands. Copy the result URL to your browser in order to download the profile zip file.
20-
21-
```azurepowershell-interactive
22-
$profile = New-AzVpnClientConfiguration -ResourceGroupName AADAuth -Name AADauthGW -AuthenticationMethod "EapTls"
23-
24-
$PROFILE.VpnProfileSASUrl
25-
```
26-
27-
## 2. Extract the zip file
28-
29-
Extract the zip file. The file contains the following folders:
30-
31-
* AzureVPN
32-
* Generic
33-
* OpenVPN (If you enabled the OpenVPN and Azure AD authentication settings on the gateway. See [Create a tenant](openvpn-azure-ad-tenant.md).)
34-
35-
## 3. Retrieve information
36-
37-
In the **AzureVPN** folder, navigate to the ***azurevpnconfig.xml*** file and open it with Notepad. Make a note of the text between the following tags.
38-
39-
```
40-
<audience> </audience>
41-
<issuer> </issuer>
42-
<tennant> </tennant>
43-
<fqdn> </fqdn>
44-
<serversecret> </serversecret>
45-
```
46-
47-
## Profile details
48-
49-
When you add a connection, use the information you collected in the previous step for the profile details page. The fields correspond to the following information:
50-
51-
* **Audience:** Identifies the recipient resource the token is intended for
52-
* **Issuer:** Identifies the Security Token Service (STS) that emitted the token as well as the Azure AD tenant
53-
* **Tenant:** Contains an immutable, unique identifier of the directory tenant that issued the token
54-
* **FQDN:** The fully qualified domain name (FQDN) on the Azure VPN gateway
55-
* **ServerSecret:** The VPN gateway preshared key
56-
57-
## Folder contents
17+
[!INCLUDE [client profiles](../../includes/vpn-gateway-vwan-vpn-profile-download.md)]
5818

5919
* The **OpenVPN folder** contains the *ovpn* profile that needs to be modified to include the key and the certificate. For more information, see [Configure OpenVPN clients for Azure VPN Gateway](vpn-gateway-howto-openvpn-clients.md#windows). This folder will not be present in the zip file if Azure AD authentication is selected on the VPN gateway. Instead, the azurevpnconfig.xml will be in the AzureVPN folder.
6020

61-
* The **generic folder** contains the public server certificate and the VpnSettings.xml file. The VpnSettings.xml file contains information needed to configure a generic client.
62-
63-
* The downloaded zip file may also contain **WindowsAmd64** and **WindowsX86** folders. These folders contain the installer for SSTP and IKEv2 for Windows clients. You need admin rights on the client to install them.
64-
6521
## Next steps
6622

6723
For more information about point-to-site, see [About point-to-site](point-to-site-about.md).
Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
---
2+
title: include file
3+
description: include file
4+
services: vpn-gateway
5+
author: cherylmc
6+
ms.service: vpn-gateway
7+
ms.topic: include
8+
ms.date: 03/17/2020
9+
ms.author: cherylmc
10+
ms.custom: include file
11+
12+
#intent: this file is used for both virtual wan and vpn gateway articles
13+
---
14+
## 1. Download the file
15+
16+
Run the following commands. Copy the result URL to your browser in order to download the profile zip file.
17+
18+
```azurepowershell-interactive
19+
$profile = New-AzVpnClientConfiguration -ResourceGroupName AADAuth -Name AADauthGW -AuthenticationMethod "EapTls"
20+
21+
$PROFILE.VpnProfileSASUrl
22+
```
23+
24+
## 2. Extract the zip file
25+
26+
Extract the zip file. The file contains the following folders:
27+
28+
* AzureVPN
29+
* Generic
30+
* OpenVPN (If you have enabled the OpenVPN and Azure AD authentication settings on the gateway.)
31+
32+
## 3. Retrieve information
33+
34+
In the **AzureVPN** folder, navigate to the ***azurevpnconfig.xml*** file and open it with Notepad. Make a note of the text between the following tags.
35+
36+
```
37+
<audience> </audience>
38+
<issuer> </issuer>
39+
<tennant> </tennant>
40+
<fqdn> </fqdn>
41+
<serversecret> </serversecret>
42+
```
43+
44+
## Profile details
45+
46+
When you add a connection, use the information you collected in the previous step for the profile details page. The fields correspond to the following information:
47+
48+
* **Audience:** Identifies the recipient resource the token is intended for
49+
* **Issuer:** Identifies the Security Token Service (STS) that emitted the token as well as the Azure AD tenant
50+
* **Tenant:** Contains an immutable, unique identifier of the directory tenant that issued the token
51+
* **FQDN:** The fully qualified domain name (FQDN) on the Azure VPN gateway
52+
* **ServerSecret:** The VPN gateway preshared key
53+
54+
## Folder contents
55+
56+
* The **generic folder** contains the public server certificate and the VpnSettings.xml file. The VpnSettings.xml file contains information needed to configure a generic client.
57+
58+
* The downloaded zip file may also contain **WindowsAmd64** and **WindowsX86** folders. These folders contain the installer for SSTP and IKEv2 for Windows clients. You need admin rights on the client to install them.

0 commit comments

Comments
 (0)