You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-wan/virtual-wan-faq.md
+16-3Lines changed: 16 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,7 +24,20 @@ To view the available regions for Virtual WAN, see [Products available by region
24
24
25
25
### Does the user need to have hub and spoke with SD-WAN/VPN devices to use Azure Virtual WAN?
26
26
27
-
Virtual WAN provides many functionalities built into a single pane of glass. This includes site/site-to-site VPN connectivity, User/P2S connectivity, ExpressRoute connectivity, virtual network connectivity, VPN ExpressRoute Interconnectivity, VNet-to-VNet transitive connectivity, Centralized Routing, Azure Firewall and Firewall Manager security, Monitoring, ExpressRoute Encryption, and many other capabilities. You don't need to have all of these use-cases to start using Virtual WAN. You can get started with just one use case.
27
+
Virtual WAN provides many functionalities built into a single pane of glass. This includes:
*[Azure Firewall and Firewall Manager security](https://learn.microsoft.com/azure/firewall-manager/secured-virtual-hub)
36
+
*[Monitoring](monitor-virtual-wan.md)
37
+
*[ExpressRoute Encryption](vpn-over-expressroute.md) and
38
+
*[Many other capabilities](virtual-wan-about.md)
39
+
40
+
You don't need to have all of these use-cases to start using Virtual WAN. You can get started with just one use case.
28
41
29
42
The Virtual WAN architecture is a hub and spoke architecture with scale and performance built in where branches (VPN/SD-WAN devices), users (Azure VPN Clients, openVPN, or IKEv2 Clients), ExpressRoute circuits, virtual networks serve as spokes to virtual hub(s). All hubs are connected in full mesh in a Standard Virtual WAN making it easy for the user to use the Microsoft backbone for any-to-any (any spoke) connectivity. For hub and spoke with SD-WAN/VPN devices, users can either manually set it up in the Azure Virtual WAN portal or use the Virtual WAN Partner CPE (SD-WAN/VPN) to set up connectivity to Azure.
30
43
@@ -50,7 +63,7 @@ While the concept of Virtual WAN is global, the actual Virtual WAN resource is R
50
63
51
64
### Is it possible to share the Firewall in a protected hub with other hubs?
52
65
53
-
No, each Azure Virtual Hub must have their own Firewall. The deployment of custom routes to point the Firewall of another secured hub's will fail and won't complete successfully. Consider to converting those hubs to [secured hubs](/azure/virtual-wan/howto-firewall) with their own Firewalls.
66
+
No, each Azure Virtual Hub must have their own Firewall. The deployment of custom routes to point the Firewall of another secured hub's will fail and won't complete successfully. Consider converting those hubs to [secured hubs](/azure/virtual-wan/howto-firewall) with their own Firewalls.
54
67
55
68
### What client does the Azure Virtual WAN User VPN (point-to-site) support?
56
69
@@ -165,7 +178,7 @@ Virtual WAN supports up to 20-Gbps aggregate throughput both for VPN and Express
165
178
166
179
### How is Virtual WAN different from an Azure virtual network gateway?
167
180
168
-
A virtual network gateway VPN is limited to 100 tunnels. For connections, you should use Virtual WAN for large-scale VPN. You can connect up to 1,000 branch connections per virtual hub with aggregate of 20 Gbps per hub. A connection is an active-active tunnel from the on-premises VPN device to the virtual hub. You can also have multiple virtual hubs per region. This means means you can connect more than 1,000 branches to a single Azure Region by deploying multiple Virtual WAN hubs in that Azure Region, each with its own site-to-site VPN gateway.
181
+
A virtual network gateway VPN is limited to 100 tunnels. For connections, you should use Virtual WAN for large-scale VPN. You can connect up to 1,000 branch connections per virtual hub with aggregate of 20 Gbps per hub. A connection is an active-active tunnel from the on-premises VPN device to the virtual hub. You can also have multiple virtual hubs per region. This means you can connect more than 1,000 branches to a single Azure Region by deploying multiple Virtual WAN hubs in that Azure Region, each with its own site-to-site VPN gateway.
169
182
170
183
### <aname="packets"></a>What is the recommended algorithm and Packets per second per site-to-site instance in Virtual WAN hub? How many tunnels is support per instance? What is the max throughput supported in a single tunnel?
0 commit comments