freshness

Author: cherylmc

articles/vpn-gateway/point-to-site-certificate-gateway.md

@@ -90,7 +90,7 @@ In this section, you upload public root certificate data to Azure. Once the publ
    :::image type="content" source="./media/vpn-gateway-howto-point-to-site-resource-manager-portal/public-certificate-data.png" alt-text="Screenshot of certificate data field." lightbox="./media/vpn-gateway-howto-point-to-site-resource-manager-portal/public-certificate-data.png":::
 
 1. Additional routes aren't necessary for this exercise. For more information about the custom routing feature, see [Advertise custom routes](vpn-gateway-p2s-advertise-custom-routes.md).
-1. Select **Save** at the top of the page to save all of the configuration settings.
+1. Select **Save** at the top of the page to save all of the configuration settings. After the configuration settings deployment completes, you can generate and download the VPN client configuration package.
 
 ## <a name="profile-files"></a>Generate VPN client profile configuration files
 

includes/media/vpn-gateway-client-address-pool/configuration-address-pool.png

@@ -1,18 +1,17 @@
 ---
 author: cherylmc
 ms.author: cherylmc
-ms.date: 11/04/2024
+ms.date: 03/12/2025
 ms.service: azure-vpn-gateway
 ms.topic: include
 ---
 
-The client address pool is a range of private IP addresses that you specify. The clients that connect over a point-to-site VPN dynamically receive an IP address from this range. Use a private IP address range that doesn't overlap with the on-premises location that you connect from, or the VNet that you want to connect to. If you configure multiple protocols and SSTP is one of the protocols, then the configured address pool is split between the configured protocols equally.
+The client address pool is a range of private IP addresses that you specify. The clients that connect over a point-to-site VPN dynamically receive an IP address from this range. Use a private IP address range that doesn't overlap with the on-premises location that you connect from, or the virtual network that you want to connect to. If you configure multiple protocols and SSTP is one of the protocols, then the configured address pool is split between the configured protocols equally.
 
 1. In the Azure portal, go to your VPN gateway.
 1. On the page for your gateway, in the left pane, select **Point-to-site configuration**.
-1. Click **Configure now** to open the configuration page.
+1. On the **Point-to-site configuration** page, click **Configure now**.
+1. On the point-to-site configuration page, you'll see the configuration box for **Address pool**.
+1. In the **Address pool** box, add the private IP address range that you want to use. For example, if you add the address range `172.16.201.0/24`, connecting VPN clients receive one of the IP addresses from this range. The minimum subnet mask is 29 bit for active/passive and 28 bit for active/active configuration.
 
-   :::image type="content" source="./media/vpn-gateway-client-address-pool/configuration-address-pool.png" alt-text="Screenshot of Point-to-site configuration page - address pool." lightbox="./media/vpn-gateway-client-address-pool/configuration-address-pool.png":::
-
-1. On the **Point-to-site configuration** page, in the **Address pool** box, add the private IP address range that you want to use. VPN clients dynamically receive an IP address from the range that you specify. The minimum subnet mask is 29 bit for active/passive and 28 bit for active/active configuration.
-1. Continue to the next section to configure more settings.
+After you add the range, continue to the next sections to configure the rest of the required settings.