Skip to content

Commit 8a7fc6d

Browse files
committed
freshness updates
1 parent f8cda85 commit 8a7fc6d

File tree

3 files changed

+58
-36
lines changed

3 files changed

+58
-36
lines changed
Binary file not shown.

articles/vpn-gateway/reset-gateway.md

Lines changed: 57 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -1,65 +1,55 @@
11
---
2-
title: 'Reset a VPN gateway or connection to reestablish IPsec tunnels'
2+
title: 'Reset a VPN Gateway or Gateway Connection to Reestablish IPsec Tunnels'
33
titleSuffix: Azure VPN Gateway
44
description: Learn how to reset a gateway or a gateway connection to reestablish IPsec tunnels.
55
author: cherylmc
66
ms.service: azure-vpn-gateway
77
ms.topic: how-to
8-
ms.date: 08/07/2024
8+
ms.date: 06/26/2025
99
ms.author: cherylmc
1010
---
1111
# Reset a VPN gateway or a connection
1212

13-
Resetting an Azure VPN gateway or gateway connection is helpful if you lose cross-premises VPN connectivity on one or more site-to-site VPN tunnels. In this situation, your on-premises VPN devices are all working correctly, but aren't able to establish IPsec tunnels with the Azure VPN gateways. This article helps you reset a VPN gateway or gateway connection.
13+
Resetting an Azure VPN gateway or gateway connection is helpful if you lose cross-premises VPN connectivity on one or more site-to-site VPN tunnels. In this situation, your on-premises VPN devices are all working correctly, but aren't able to establish IPsec tunnels with the Azure VPN gateways. This article helps you reset a VPN gateway or a gateway connection.
1414

15-
## What happens during a reset
15+
## Reset a VPN gateway
1616

17-
### Gateway reset
17+
A VPN gateway is composed of two VM instances running in an active-active or active-standby configuration. When you reset the gateway, it reboots the gateway, and then reapplies the cross-premises configurations to it. The gateway keeps the public IP address it already has. This means you don't need to update the VPN router configuration with a new public IP address for Azure VPN gateway.
1818

19-
A VPN gateway is composed of two virtual machine (VM) instances running in an active-standby or active-active configuration. When you reset the gateway, it reboots the gateway, and then reapplies the cross-premises configurations to it. The gateway keeps the public IP address it already has. This means you won’t need to update the VPN router configuration with a new public IP address for Azure VPN gateway.
19+
### Gateway reset behavior
2020

21-
When you issue the command to reset the gateway in active-standby setup, the current active instance of the Azure VPN gateway is rebooted immediately. A brief connectivity disruption can be expected during the failover from the active instance (being rebooted), to the standby instance.
21+
Gateway reset behavior depends on the configuration of the VPN gateway.
2222

23-
When you issue the command to reset the gateway in active-active setup, one of the active instances (for example, primary active instance) of the Azure VPN gateway is rebooted immediately. A brief connectivity disruption can be expected as the gateway instance gets rebooted.
23+
* **Active-active mode gateway**: When you issue the command to reset the gateway in active-active setup, one of the active instances (the primary active instance) of the Azure VPN gateway is rebooted immediately. A brief connectivity disruption can be expected as the gateway instance gets rebooted.
2424

25-
If the connection hasn't restored after the first reboot, the next steps might vary depending on if the VPN gateway is configured as active-standby or active-active:
25+
* **Active-standby mode gateway**: When you issue the command to reset the gateway in active-standby setup, the current active instance of the Azure VPN gateway is rebooted immediately. A brief connectivity disruption can be expected during the failover from the active instance (being rebooted), to the standby instance.
2626

27-
* If the VPN gateway is configured as active-standby, issue the same command again to reboot the second VM instance (the new active gateway).
28-
* If the VPN gateway is configured as active-active, the same instance gets rebooted when the reset gateway operation is issued again. You can use PowerShell or CLI to reset one or both of the instances using VIPs.
27+
If the connection isn't restored after the first reboot, the next steps might vary depending on whether the VPN gateway is configured as active-active or active-standby:
2928

30-
### Connection reset
29+
* If the VPN gateway is configured as **active-active**, the same instance gets rebooted when the reset gateway operation is issued again. You can use PowerShell or CLI to reset one or both of the instances using VIPs.
30+
* If the VPN gateway is configured as **active-standby**, issue the same command again to reboot the second VM instance (the new active gateway).
3131

32-
When you select to reset a connection, the gateway doesn't reboot. Only the selected connection is reset and restored.
32+
### Key items to verify before resetting a gateway
3333

34-
## Reset a connection
35-
36-
You can reset a connection easily using the Azure portal.
37-
38-
1. Go to the **Connection** that you want to reset. You can find the connection resource either by locating it in **All resources**, or by going to the **'Gateway Name' -> Connections -> 'Connection Name'**
39-
1. On the **Connection** page, in the left pane, scroll down to the **Help** section and select **Reset**.
40-
1. On the **Reset** page, select **Reset** to reset the connection.
41-
42-
## Reset a gateway
43-
44-
Before you reset your gateway, verify the following key items for each IPsec site-to-site (S2S) VPN tunnel. Any mismatch in the items results in the disconnect of S2S VPN tunnels. Verifying and correcting the configurations for your on-premises and Azure VPN gateways saves you from unnecessary reboots and disruptions for the other working connections on the gateways.
45-
46-
Verify the following items before resetting your gateway:
34+
Before you reset your gateway, verify the following key items listed for each IPsec site-to-site (S2S) VPN tunnel. Any mismatch in the items will result in the disconnect of S2S VPN tunnels. Verifying and correcting the configurations for your on-premises and Azure VPN gateways saves you from unnecessary reboots and disruptions for the other working connections on the gateways.
4735

4836
* The Internet IP addresses (VIPs) for both the Azure VPN gateway and the on-premises VPN gateway are configured correctly in both the Azure and the on-premises VPN policies.
4937
* The preshared key must be the same on both Azure and on-premises VPN gateways.
5038
* If you apply specific IPsec/IKE configuration, such as encryption, hashing algorithms, and PFS (Perfect Forward Secrecy), ensure both the Azure and on-premises VPN gateways have the same configurations.
5139

52-
### <a name="portal"></a>Azure portal
40+
### Reset a gateway
5341

54-
You can reset a Resource Manager VPN gateway using the Azure portal.
42+
The following sections describe how to reset a VPN gateway using the Azure portal, PowerShell, or Azure CLI. If the VPN gateway is configured as active-active and you want to reset each gateway instance separately, you can use PowerShell or CLI.
5543

56-
[!INCLUDE [portal steps](../../includes/vpn-gateway-reset-gw-portal-include.md)]
44+
#### <a name="portal"></a>Azure portal
45+
46+
To reset a VPN gateway using the Azure portal, follow these steps:
5747

58-
Note: If the VPN gateway is configured as active-active, you can reset the gateway instances using VIPs of the instances in PowerShell or CLI.
48+
[!INCLUDE [portal steps](../../includes/vpn-gateway-reset-gw-portal-include.md)]
5949

60-
### <a name="ps"></a>PowerShell
50+
#### <a name="ps"></a>PowerShell
6151

62-
The cmdlet for resetting a gateway is [Reset-AzVirtualNetworkGateway](/powershell/module/az.network/reset-azvirtualnetworkgateway). If the gateway is set up as **active-active**, use `-GatewayVip <string>` to reset both the instances one by one.
52+
The cmdlet for resetting a gateway is [Reset-AzVirtualNetworkGateway](/powershell/module/az.network/reset-azvirtualnetworkgateway). If the gateway is set up as active-active, you can use `-GatewayVip <string>` to reset each instance, one by one.
6353

6454
The following example resets a virtual network gateway named VNet1GW in the TestRG1 resource group:
6555

@@ -70,9 +60,9 @@ Reset-AzVirtualNetworkGateway -VirtualNetworkGateway $gw
7060

7161
You can view the reset history of the gateway from [Azure portal](https://portal.azure.com) by navigating to **'GatewayName' -> Resource Health**.
7262

73-
### <a name="cli"></a>Azure CLI
63+
#### <a name="cli"></a>Azure CLI
7464

75-
To reset the gateway, use the [az network vnet-gateway reset](/cli/azure/network/vnet-gateway) command. If the gateway is set up as **active-active**, use `--gateway-vip <string>` to reset both the instances one by one.
65+
To reset the gateway, use the [az network vnet-gateway reset](/cli/azure/network/vnet-gateway) command. If the gateway is set up as active-active, use `--gateway-vip <string>` to reset each instance, one by one.
7666

7767
The following example resets a virtual network gateway named VNet5GW in the TestRG5 resource group:
7868

@@ -82,6 +72,38 @@ az network vnet-gateway reset -n VNet5GW -g TestRG5
8272

8373
You can view the reset history of the gateway from [Azure portal](https://portal.azure.com) by navigating to **'GatewayName' -> Resource Health**.
8474

75+
### <a name="resetclassic"></a>Reset a classic gateway
76+
77+
The cmdlet for resetting a classic gateway is **Reset-AzureVNetGateway**. The Azure PowerShell cmdlets for Service Management must be installed locally on your desktop. You can't use Azure Cloud Shell. Before performing a reset, make sure you have the latest version of the [Service Management (SM) PowerShell cmdlets](/powershell/azure/servicemanagement/install-azure-ps#azure-service-management-cmdlets).
78+
79+
When using this command, make sure you're using the full name of the virtual network. Classic VNets that were created using the portal have a long name that is required for PowerShell. You can view the long name by using `Get-AzureVNetConfig -ExportToFile C:\Myfoldername\NetworkConfig.xml`.
80+
81+
The following example resets the gateway for a virtual network named "Group TestRG1 TestVNet1" (which shows as simply "TestVNet1" in the portal):
82+
83+
```powershell
84+
Reset-AzureVNetGateway –VnetName 'Group TestRG1 TestVNet1'
85+
```
86+
87+
Result:
88+
89+
```powershell
90+
Error :
91+
HttpStatusCode : OK
92+
Id : f1600632-c819-4b2f-ac0e-f4126bec1ff8
93+
Status : Successful
94+
RequestId : 9ca273de2c4d01e986480ce1ffa4d6d9
95+
StatusCode : OK
96+
```
97+
98+
## Reset a connection
99+
100+
When you reset a VPN gateway connection, the gateway doesn't reboot. Only the selected connection is reset and restored. You can reset a connection easily using the Azure portal.
101+
102+
1. Go to the **Connection** that you want to reset. You can find the connection resource either by locating it in **All resources**, or by going to the **'Gateway Name' -> Connections**.
103+
1. From the list of connections for your gateway, click the connection that you want to reset to open the **Connection** page for that connection.
104+
1. On the **Connection** page, in the left pane, scroll down to the **Support + Troubleshooting** section and select **Reset**.
105+
1. On the **Reset** page, click **Reset** to reset the connection.
106+
85107
## Next steps
86108

87-
For more information about VPN Gateway, see the [VPN Gateway FAQ](vpn-gateway-vpn-faq.md).
109+
For more information about VPN Gateway, see the [VPN Gateway FAQ](vpn-gateway-vpn-faq.md).

articles/vpn-gateway/tutorial-site-to-site-portal.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -149,7 +149,7 @@ You can configure more settings for your connection, if necessary. Otherwise, sk
149149

150150
### <a name="reset"></a>Reset a gateway
151151

152-
Resetting an Azure VPN gateway is helpful if you lose cross-premises VPN connectivity on one or more site-to-site VPN tunnels. In this situation, your on-premises VPN devices are all working correctly but aren't able to establish IPsec tunnels with the Azure VPN gateways. If you need to reset an active-active gateway, you can reset both instances using the portal. You can also use PowerShell or CLI to reset each gateway instance separately using instance VIPs. For more information, see [Reset a connection or a gateway](reset-gateway.md#reset-a-gateway).
152+
Resetting an Azure VPN gateway is helpful if you lose cross-premises VPN connectivity on one or more site-to-site VPN tunnels. In this situation, your on-premises VPN devices are all working correctly but aren't able to establish IPsec tunnels with the Azure VPN gateways. If you need to reset an active-active gateway, you can reset both instances using the portal. You can also use PowerShell or CLI to reset each gateway instance separately using instance VIPs. For more information, see [Reset a VPN gateway or a connection](reset-gateway.md).
153153

154154
[!INCLUDE [reset a gateway](../../includes/vpn-gateway-reset-gw-portal-include.md)]
155155

0 commit comments

Comments
 (0)