Skip to content

Commit 8da21b7

Browse files
v-stsavellv-stsavell
authored
Merge pull request #219346 from cherylmc/vpnclient-links
Vpnclient links
2 parents 6d32b19 + 31ab3b2 commit 8da21b7

File tree

4 files changed

+39
-255
lines changed

4 files changed

+39
-255
lines changed

‎articles/vpn-gateway/azure-vpn-client-optional-configurations.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -159,6 +159,11 @@ You block (exclude) routes. Modify the downloaded profile XML file and add the *
159159
</azvpnprofile>
160160
```
161161

162+
> [!NOTE]
163+
> - The default status for clientconfig tag is <clientconfig i:nil="true" />, which can be modified based on the requirement.
164+
> - Duplicate clientconfig tag is not supported on macOS, so make sure the clientconfig tag is not duplicated in the XML file.
165+
>
166+
162167
## Next steps
163168

164169
For more information about P2S VPN, see the following articles:

‎articles/vpn-gateway/openvpn-azure-ad-client-mac.md

Lines changed: 15 additions & 120 deletions
Original file line numberDiff line numberDiff line change
@@ -7,11 +7,11 @@ author: cherylmc
77

88
ms.service: vpn-gateway
99
ms.topic: conceptual
10-
ms.date: 09/30/2021
10+
ms.date: 11/22/2022
1111
ms.author: cherylmc
1212

1313
---
14-
# Configure an Azure VPN Client - Azure AD authentication - macOS
14+
# Configure the Azure VPN Client - Azure AD authentication - macOS
1515

1616
This article helps you configure a VPN client for a computer running macOS 10.15 and later to connect to a virtual network using Point-to-Site VPN and Azure Active Directory authentication. Before you can connect and authenticate using Azure AD, you must first configure your Azure AD tenant. For more information, see [Configure an Azure AD tenant](openvpn-azure-ad-tenant.md). For more information about Point-to-Site connections, see [About Point-to-Site connections](point-to-site-about.md).
1717

@@ -21,7 +21,7 @@ This article helps you configure a VPN client for a computer running macOS 10.15
2121
>
2222
2323
For every computer that you want to connect to a VNet using a Point-to-Site VPN connection, you need to do the following:
24-
24+
2525
* Download the Azure VPN Client to the computer.
2626
* Configure a client profile that contains the VPN settings.
2727

@@ -31,14 +31,18 @@ If you want to configure multiple computers, you can create a client profile on
3131

3232
Before you can connect and authenticate using Azure AD, you must first configure your Azure AD tenant. For more information, see [Configure an Azure AD tenant](openvpn-azure-ad-tenant.md).
3333

34-
## <a name="download"></a>To download the Azure VPN client
34+
## Download the Azure VPN Client
3535

3636
1. Download the [Azure VPN Client](https://apps.apple.com/us/app/azure-vpn-client/id1553936137) from the Apple Store.
3737
1. Install the client on your computer.
3838

39-
## <a name="import"></a>To import a connection profile
39+
## Generate VPN client profile configuration files
40+
41+
1. To generate the VPN client profile configuration package, see [Working with P2S VPN client profile files](about-vpn-profile-download.md).
42+
1. Download and extract the VPN client profile configuration files.
43+
44+
## Import VPN client profile configuration files
4045

41-
1. Download and extract the profile files. For steps, see [Working with VPN client profile files](about-vpn-profile-download.md).
4246
1. On the Azure VPN Client page, select **Import**.
4347

4448
:::image type="content" source="media/openvpn-azure-ad-client-mac/import-1.png" alt-text="Screenshot of Azure VPN Client import selection.":::
@@ -55,7 +59,7 @@ Before you can connect and authenticate using Azure AD, you must first configure
5559

5660
:::image type="content" source="media/openvpn-azure-ad-client-mac/import-5.png" alt-text="Screenshot of Azure VPN Client connected status and disconnect button.":::
5761

58-
## <a name="manual"></a>To create a connection manually
62+
## To create a connection manually
5963

6064
1. Open the Azure VPN Client. Select **Add** to create a new connection.
6165

@@ -87,9 +91,9 @@ Before you can connect and authenticate using Azure AD, you must first configure
8791

8892
:::image type="content" source="media/openvpn-azure-ad-client-mac/add-5.png" alt-text="Screenshot of Azure VPN Client connected and disconnect button.":::
8993

90-
## <a name="remove"></a>To remove a connection profile
94+
## To remove a VPN connection profile
9195

92-
You can remove the VPN connection profile from your computer.
96+
You can remove the VPN connection profile from your computer.
9397

9498
1. Navigate to the Azure VPN Client.
9599
1. Select the VPN connection that you want to remove, click the dropdown, and select **Remove**.
@@ -98,118 +102,9 @@ You can remove the VPN connection profile from your computer.
98102
1. On the **Remove VPN connection?** box, click **Remove**.
99103
:::image type="content" source="media/openvpn-azure-ad-client-mac/remove-2.png" alt-text="Screenshot of removing.":::
100104

101-
## FAQ
102-
103-
### How do I add DNS suffixes to the VPN client?
104-
105-
You can modify the downloaded profile XML file and add the **\<dnssuffixes>\<dnssufix> \</dnssufix>\</dnssuffixes>** tags.
106-
107-
```
108-
<azvpnprofile>
109-
<clientconfig>
110-
111-
<dnssuffixes>
112-
<dnssuffix>.mycorp.com</dnssuffix>
113-
<dnssuffix>.xyz.com</dnssuffix>
114-
<dnssuffix>.etc.net</dnssuffix>
115-
</dnssuffixes>
116-
117-
</clientconfig>
118-
</azvpnprofile>
119-
```
120-
121-
### How do I add custom DNS servers to the VPN client?
122-
123-
You can modify the downloaded profile XML file and add the **\<dnsservers>\<dnsserver> \</dnsserver>\</dnsservers>** tags.
124-
125-
```
126-
<azvpnprofile>
127-
<clientconfig>
128-
129-
<dnsservers>
130-
<dnsserver>x.x.x.x</dnsserver>
131-
<dnsserver>y.y.y.y</dnsserver>
132-
</dnsservers>
133-
134-
</clientconfig>
135-
</azvpnprofile>
136-
```
105+
## Optional Azure VPN Client configuration settings
137106

138-
### <a name="split"></a>Can I configure split tunneling for the VPN client?
139-
140-
Split tunneling is configured by default for the VPN client.
141-
142-
### <a name="forced-tunnel"></a>How do I direct all traffic to the VPN tunnel (forced tunneling)?
143-
144-
You can configure forced tunneling using two different methods; either by advertising custom routes, or by modifying the profile XML file.
145-
146-
> [!NOTE]
147-
> Internet connectivity is not provided through the VPN gateway. As a result, all traffic bound for the Internet is dropped.
148-
>
149-
150-
* **Advertise custom routes:** You can advertise custom routes 0.0.0.0/1 and 128.0.0.0/1. For more information, see [Advertise custom routes for P2S VPN clients](vpn-gateway-p2s-advertise-custom-routes.md).
151-
152-
* **Profile XML:** You can modify the downloaded profile XML file to add the **\<includeroutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</includeroutes>** tags.
153-
154-
155-
```
156-
<azvpnprofile>
157-
<clientconfig>
158-
159-
<includeroutes>
160-
<route>
161-
<destination>0.0.0.0</destination><mask>1</mask>
162-
</route>
163-
<route>
164-
<destination>128.0.0.0</destination><mask>1</mask>
165-
</route>
166-
</includeroutes>
167-
168-
</clientconfig>
169-
</azvpnprofile>
170-
```
171-
172-
173-
### How do I add custom routes to the VPN client?
174-
175-
You can modify the downloaded profile XML file and add the **\<includeroutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</includeroutes>** tags.
176-
177-
```
178-
<azvpnprofile>
179-
<clientconfig>
180-
181-
<includeroutes>
182-
<route>
183-
<destination>x.x.x.x</destination><mask>24</mask>
184-
</route>
185-
</includeroutes>
186-
187-
</clientconfig>
188-
</azvpnprofile>
189-
```
190-
191-
### How do I block (exclude) routes from the VPN client?
192-
193-
You can modify the downloaded profile XML file and add the **\<excluderoutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</excluderoutes>** tags.
194-
195-
```
196-
<azvpnprofile>
197-
<clientconfig>
198-
199-
<excluderoutes>
200-
<route>
201-
<destination>x.x.x.x</destination><mask>24</mask>
202-
</route>
203-
</excluderoutes>
204-
205-
</clientconfig>
206-
</azvpnprofile>
207-
```
208-
209-
> [!NOTE]
210-
> - The default status for clientconfig tag is <clientconfig i:nil="true" />, which can be modified based on the requirement.
211-
> - Duplicate clientconfig tag is not supported on macOS, so make sure the clientconfig tag is not duplicated in the XML file.
212-
>
107+
You can configure the Azure VPN Client with optional configuration settings such as additional DNS servers, custom DNS, forced tunneling, custom routes, and other additional settings. For a description of the available optional settings and configuration steps, see [Azure VPN Client optional settings](azure-vpn-client-optional-configurations.md).
213108

214109
## Next steps
215110

‎articles/vpn-gateway/openvpn-azure-ad-client.md

Lines changed: 10 additions & 132 deletions
Original file line numberDiff line numberDiff line change
@@ -5,36 +5,36 @@ titleSuffix: Azure VPN Gateway
55
author: cherylmc
66
ms.service: vpn-gateway
77
ms.topic: conceptual
8-
ms.date: 05/05/2022
8+
ms.date: 11/22/2022
99
ms.author: cherylmc
1010

1111
---
12-
# Configure an Azure VPN Client - Azure AD authentication - Windows
12+
# Configure the Azure VPN Client - Azure AD authentication - Windows
1313

14-
This article helps you configure the Azure VPN Client on a Windows computer to connect to a virtual network using a VPN Gateway point-to-site VPN and Azure Active Directory authentication. Before you can connect and authenticate using Azure AD, you must first configure your Azure AD tenant. For more information, see [Configure an Azure AD tenant](openvpn-azure-ad-tenant.md). For more information about point-to-site, see [About point-to-site VPN](point-to-site-about.md).
14+
This article helps you configure the Azure VPN Client on a Windows computer to connect to a virtual network using a VPN Gateway point-to-site (P2S) VPN and Azure Active Directory authentication. Before you can connect and authenticate using Azure AD, you must first configure your Azure AD tenant. For more information, see [Configure an Azure AD tenant](openvpn-azure-ad-tenant.md). For more information about point-to-site, see [About point-to-site VPN](point-to-site-about.md). The Azure VPN Client supported with Windows FIPS mode with the [KB4577063](https://support.microsoft.com/help/4577063/windows-10-update-kb4577063) hotfix.
1515

1616
[!INCLUDE [OpenVPN note](../../includes/vpn-gateway-openvpn-auth-include.md)]
1717

1818
## <a name="workflow"></a>Workflow
1919

20-
After your Azure VPN Gateway point-to-site configuration is complete, your next steps are as follows:
20+
After your Azure VPN Gateway P2S configuration is complete, your next steps are as follows:
2121

2222
1. Download and install the Azure VPN Client.
2323
1. Generate the VPN client profile configuration package.
2424
1. Import the client profile settings to the VPN client.
2525
1. Create a connection.
2626
1. Optional - export the profile settings from the client and import to other client computers.
2727

28-
2928
## <a name="download"></a>Download the Azure VPN Client
3029

3130
[!INCLUDE [Download Azure VPN Client](../../includes/vpn-gateway-download-vpn-client.md)]
3231

33-
## <a name="generate"></a>Generate the VPN client profile configuration package
32+
## <a name="generate"></a>Generate VPN client profile configuration files
3433

35-
To generate the VPN client profile configuration package, see [Working with P2S VPN client profile files](about-vpn-profile-download.md). After you generate the package, follow the steps to extract the profile configuration files.
34+
1. To generate the VPN client profile configuration package, see [Working with P2S VPN client profile files](about-vpn-profile-download.md).
35+
1. Download and extract the VPN client profile configuration files.
3636

37-
## <a name="import"></a>Import the profile file
37+
## <a name="import"></a>Import VPN client profile configuration files
3838

3939
For Azure AD authentication configurations, the **azurevpnconfig.xml** is used. The file is located in the **AzureVPN** folder of the VPN client profile configuration package.
4040

@@ -132,131 +132,9 @@ Once you have a working profile and need to distribute it to other users, you ca
132132

133133
![diagnose](./media/openvpn-azure-ad-client/diagnose/diagnose4.jpg)
134134

135-
## FAQ
136-
137-
### Is the Azure VPN Client supported with Windows FIPS mode?
138-
139-
Yes, with the [KB4577063](https://support.microsoft.com/help/4577063/windows-10-update-kb4577063) hotfix.
140-
141-
### How do I add DNS suffixes to the VPN client?
142-
143-
You can modify the downloaded profile XML file and add the **\<dnssuffixes>\<dnssufix> \</dnssufix>\</dnssuffixes>** tags.
144-
145-
```
146-
<azvpnprofile>
147-
<clientconfig>
148-
149-
<dnssuffixes>
150-
<dnssuffix>.mycorp.com</dnssuffix>
151-
<dnssuffix>.xyz.com</dnssuffix>
152-
<dnssuffix>.etc.net</dnssuffix>
153-
</dnssuffixes>
154-
155-
</clientconfig>
156-
</azvpnprofile>
157-
```
158-
159-
### How do I add custom DNS servers to the VPN client?
160-
161-
You can modify the downloaded profile XML file and add the **\<dnsservers>\<dnsserver> \</dnsserver>\</dnsservers>** tags.
162-
163-
```
164-
<azvpnprofile>
165-
<clientconfig>
166-
167-
<dnsservers>
168-
<dnsserver>x.x.x.x</dnsserver>
169-
<dnsserver>y.y.y.y</dnsserver>
170-
</dnsservers>
171-
172-
</clientconfig>
173-
</azvpnprofile>
174-
```
175-
176-
> [!NOTE]
177-
> The OpenVPN Azure AD client utilizes DNS Name Resolution Policy Table (NRPT) entries, which means DNS servers will not be listed under the output of `ipconfig /all`. To confirm your in-use DNS settings, please consult [Get-DnsClientNrptPolicy](/powershell/module/dnsclient/get-dnsclientnrptpolicy) in PowerShell.
178-
>
179-
180-
### <a name="split"></a>Can I configure split tunneling for the VPN client?
181-
182-
Split tunneling is configured by default for the VPN client.
183-
184-
### <a name="forced-tunnel"></a>How do I direct all traffic to the VPN tunnel (forced tunneling)?
185-
186-
You can configure forced tunneling using two different methods; either by advertising custom routes, or by modifying the profile XML file.
187-
188-
> [!NOTE]
189-
> Internet connectivity is not provided through the VPN gateway. As a result, all traffic bound for the Internet is dropped.
190-
>
191-
192-
* **Advertise custom routes:** You can advertise custom routes 0.0.0.0/1 and 128.0.0.0/1. For more information, see [Advertise custom routes for P2S VPN clients](vpn-gateway-p2s-advertise-custom-routes.md).
193-
194-
* **Profile XML:** You can modify the downloaded profile XML file to add the **\<includeroutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</includeroutes>** tags.
195-
196-
197-
```
198-
<azvpnprofile>
199-
<clientconfig>
200-
201-
<includeroutes>
202-
<route>
203-
<destination>0.0.0.0</destination><mask>1</mask>
204-
</route>
205-
<route>
206-
<destination>128.0.0.0</destination><mask>1</mask>
207-
</route>
208-
</includeroutes>
209-
210-
</clientconfig>
211-
</azvpnprofile>
212-
```
213-
214-
215-
### How do I add custom routes to the VPN client?
216-
217-
You can modify the downloaded profile XML file and add the **\<includeroutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</includeroutes>** tags.
218-
219-
```
220-
<azvpnprofile>
221-
<clientconfig>
222-
223-
<includeroutes>
224-
<route>
225-
<destination>x.x.x.x</destination><mask>24</mask>
226-
</route>
227-
</includeroutes>
228-
229-
</clientconfig>
230-
</azvpnprofile>
231-
```
232-
233-
### How do I block (exclude) routes from the VPN client?
234-
235-
You can modify the downloaded profile XML file and add the **\<excluderoutes>\<route>\<destination>\<mask> \</destination>\</mask>\</route>\</excluderoutes>** tags.
236-
237-
```
238-
<azvpnprofile>
239-
<clientconfig>
240-
241-
<excluderoutes>
242-
<route>
243-
<destination>x.x.x.x</destination><mask>24</mask>
244-
</route>
245-
</excluderoutes>
246-
247-
</clientconfig>
248-
</azvpnprofile>
249-
```
250-
251-
### Can I import the profile from a command-line prompt?
252-
253-
You can import the profile from a command-line prompt by placing the downloaded **azurevpnconfig.xml** file in the **%userprofile%\AppData\Local\Packages\Microsoft.AzureVpn_8wekyb3d8bbwe\LocalState** folder and running the following command:
254-
255-
```
256-
azurevpn -i azurevpnconfig.xml
257-
```
258-
To force the import, use the **-f** switch.
135+
## Optional Azure VPN Client configuration settings
259136

137+
You can configure the Azure VPN Client with optional configuration settings such as additional DNS servers, custom DNS, forced tunneling, custom routes, and other additional settings. For a description of the available optional settings and configuration steps, see [Azure VPN Client optional settings](azure-vpn-client-optional-configurations.md).
260138

261139
## Next steps
262140

0 commit comments

Comments
 (0)