You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/vpn-gateway/active-active-portal.md
+12-14Lines changed: 12 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ description: Learn how to configure active-active virtual network gateways using
5
5
author: cherylmc
6
6
ms.service: vpn-gateway
7
7
ms.topic: how-to
8
-
ms.date: 07/22/2021
8
+
ms.date: 03/12/2024
9
9
ms.author: cherylmc
10
10
11
11
---
@@ -17,20 +17,20 @@ This article helps you create highly available active-active VPN gateways using
17
17
To achieve high availability for cross-premises and VNet-to-VNet connectivity, you should deploy multiple VPN gateways and establish multiple parallel connections between your networks and Azure. See [Highly Available cross-premises and VNet-to-VNet connectivity](vpn-gateway-highlyavailable.md) for an overview of connectivity options and topology.
18
18
19
19
> [!IMPORTANT]
20
-
> The active-active mode is available for all SKUs except Basic or Standard. For more information, see [Configuration settings](vpn-gateway-about-vpn-gateway-settings.md#gwsku).
20
+
> The active-active mode is available for all SKUs except Basic or Standard. See [About Gateway SKUs](about-gateway-skus.md) article for the latest information about gateway SKUs, performance, and supported features.
21
21
>
22
22
23
-
The steps in this article help you configure a VPN gateway in active-active mode. There are a few differences between active-active and active-standby modes. The other properties are the same as the non-active-active gateways.
23
+
The steps in this article help you configure a VPN gateway in active-active mode. There are a few differences between active-active and active-standby modes. The other properties are the same as the non-active-active gateways.
24
24
25
25
* Active-active gateways have two Gateway IP configurations and two public IP addresses.
26
26
* Active-active gateways have active-active setting enabled.
27
27
* The virtual network gateway SKU can't be Basic or Standard.
28
28
29
29
If you already have a VPN gateway, you can [Update an existing VPN gateway](#update) from active-standby to active-active mode, or from active-active to active-standby mode.
30
30
31
-
## <aname="vnet"></a>Create a VNet
31
+
## <aname="vnet"></a>Create a virtual network
32
32
33
-
If you don't already have a VNet that you want to use, create a VNet using the following values:
33
+
If you don't already have a virtual network (VNet) that you want to use, create a VNet using the following values:
34
34
35
35
***Resource group:** TestRG1
36
36
***Name:** VNet1
@@ -67,7 +67,7 @@ You can see the deployment status on the Overview page for your gateway. After t
67
67
68
68
## <aname ="update"></a> Update an existing VPN gateway
69
69
70
-
This section helps you change an existing Azure VPN gateway from active-standby to active-active mode, and from active-active to active-standby mode. When you change an active-standby gateway to active-active, you create another public IP address, then add a second gateway IP configuration.
70
+
This section helps you change an existing Azure VPN gateway from active-standby to active-active mode, and from active-active to active-standby mode. When you change an active-standby gateway to active-active, you create another public IP address, then add a second gateway IP configuration.
71
71
72
72
### Change active-standby to active-active
73
73
@@ -77,22 +77,20 @@ Use the following steps to convert active-standby mode gateway to active-active
77
77
78
78
1. On the left menu, select **Configuration**.
79
79
80
-
1. On the **Configuration** page, configure the following settings:
80
+
1. On the **Configuration** page, configure the following settings:
81
81
82
82
* Change the Active-active mode to **Enabled**.
83
-
* Click **Create another gateway IP configuration**.
83
+
* Click **Add new** to add another public IP address. If you already have an IP address that you previously created that's available to dedicate to this resource, you can instead select it from the **SECOND PUBLIC IP ADDRESS** dropdown.
84
84
85
-
:::image type="content" source="./media/active-active-portal/configuration.png" alt-text="Screenshot shows the Configuration page.":::
85
+
:::image type="content" source="./media/active-active-portal/active-active.png" alt-text="Screenshot shows the Configuration page with active-active mode enabled." lightbox="./media/active-active-portal/active-active.png":::
86
86
87
-
1. On the **Choose public IP address** page and either specify an existing public IP address that meets the criteria, or select **+Create new** to create a new public IP address to use for the second VPN gateway instance.
88
-
89
-
1. On the **Create public IP address** page, select the **Basic** SKU, then click **OK**.
87
+
1. On the **Choose public IP address** page and either specify an existing public IP address that meets the criteria, or select **+Create new** to create a new public IP address to use for the second VPN gateway instance. After you've specified the second public IP address, click **OK**.
90
88
91
89
1. At the top of the **Configuration** page, click **Save**. This update can take about 30-45 minutes to complete.
92
90
93
91
> [!IMPORTANT]
94
92
> If you have BGP sessions running, be aware that the Azure VPN Gateway BGP configuration will change and two newly assigned BGP IPs will be provisioned within the Gateway Subnet address range. The old Azure VPN Gateway BGP IP address will no longer exist. This will incur downtime and updating the BGP peers on the on-premises devices will be required. Once the gateway is finished provisioning, the new BGP IPs can be obtained and the on-premises device configuration will need to be updated accordingly. This applies to non APIPA BGP IPs. To understand how to configure BGP in Azure, see [How to configure BGP on Azure VPN Gateways](bgp-howto.md).
95
-
>
93
+
>
96
94
97
95
### Change active-active to active-standby
98
96
@@ -108,7 +106,7 @@ Use the following steps to convert active-active mode gateway to active-standby
108
106
109
107
> [!IMPORTANT]
110
108
> If you have BGP sessions running, be aware that the Azure VPN Gateway BGP configuration will change from two BGP IP addresses to a single BGP address. The platform generally assigns the last usable IP of the Gateway Subnet. This will incur downtime and updating the BGP peers on the on-premises devices will be required. This applies to non APIPA BGP IPs. To understand how to configure BGP in Azure, see [How to configure BGP on Azure VPN Gateways](bgp-howto.md).
4. Specify in the values for **Public IP address**. These settings specify the public IP address object that gets associated to the VPN gateway. The public IP address is dynamically assigned to this object when the VPN gateway is created. For gateways that are not[zone-redundant](../articles/vpn-gateway/about-zone-redundant-vnet-gateways.md), the only time the Public IP address changes is when the gateway is deleted and re-created. It doesn't change across resizing, resetting, or other internal maintenance/upgrades of your VPN gateway.
8
+
4. Specify in the values for **Public IP address**. These settings specify the public IP address object that gets associated to the VPN gateway. The public IP address is dynamically assigned to this object when the VPN gateway is created. For gateways that aren't[zone-redundant](../articles/vpn-gateway/about-zone-redundant-vnet-gateways.md), the only time the Public IP address changes is when the gateway is deleted and re-created. It doesn't change across resizing, resetting, or other internal maintenance/upgrades of your VPN gateway.
13
9
14
10
:::image type="content" source="./media/vpn-gateway-add-gw-pip-active-portal/pip-details.png" alt-text="Screenshot of public IP address field.":::
15
11
16
12
***Public IP address**: Leave **Create new** selected.
17
13
***Public IP address name**: In the text box, type a name for your public IP address instance.
18
-
***Assignment**: VPN gateway supports only Dynamic.
14
+
***Assignment**: Static is selected automatically.
***Second Public IP Address**: Select **Create new**.
21
17
***Public IP address name**: Name the second Public IP address.
22
-
* Leave **Configure BGP** as **Disabled**, unless your configuration specifically requires this setting. If you do require this setting, the default ASN is 65515, although this can be changed.
18
+
* Leave **Configure BGP** as **Disabled**, unless your configuration specifically requires this setting. If you do require this setting, the default ASN is 65515, but other ASNs can be used.
23
19
5. Select **Review + create** to run validation.
24
20
6. Once validation passes, select **Create** to deploy the VPN gateway.
0 commit comments