freshness

Author: cherylmc

includes/vpn-gateway-add-azgw-pip-portal-include.md

@@ -2,7 +2,7 @@
  author: cherylmc
  ms.service: azure-vpn-gateway
  ms.topic: include
- ms.date: 07/29/2024
+ ms.date: 10/30/2024
  ms.author: cherylmc
 
 # The numbers in this include are correct. They add on to sections in multiple articles that are already numbered.
@@ -17,12 +17,15 @@
    * **Public IP address name**: In the text box, enter a name for your public IP address instance.
    * **Public IP address SKU**: Setting is autoselected to Standard SKU.
    * **Assignment**: The assignment is typically autoselected and should be Static.
-   * **Availability zone**: Select Zone-redundant, unless you know you want to specify a zone.
-   * **Enable active-active mode**: Select **Enabled**. This creates an [active-active](../articles/vpn-gateway/about-active-active-gateways.md) gateway configuration.
-   * **Second public IP address:** Select **Create new**.
+   * **Availability zone**: This setting is available for AZ gateway SKUs in regions that support [availability zones](../articles/vpn-gateway/about-zone-redundant-vnet-gateways.md). Select Zone-redundant, unless you know you want to specify a zone.
+   * **Enable active-active mode**: We recommend that you select **Enabled** to take advantage of the benefits of an [active-active mode](../articles/vpn-gateway/about-active-active-gateways.md) gateway. If you plan to use this gateway for a site-to-site connection, take into consideration the following:
+      * Verify the [active-active design](../articles/vpn-gateway/about-active-active-gateways.md#active-active-mode-design) that you want to use. Connections with your on-premises VPN device must be configured specifically to take advantage of active-active mode.
+      * Some VPN devices don't support active-active mode. If you're not sure, check with your VPN device vendor. If you're using a VPN device that doesn't support active-active mode, you can select **Disabled** for this setting. 
+   * **Second public IP address:** Select **Create new**. This is available only if you selected **Enabled** for the **Enable active-active mode** setting.
    * **Public IP address name**: In the text box, enter a name for your public IP address instance.
    * **Public IP address SKU**: Setting is autoselected to Standard SKU.
    * **Availability zone**: Select Zone-redundant, unless you know you want to specify a zone.
    * **Configure BGP:** Select Disabled unless your configuration specifically requires this setting. If you do require this setting, the default ASN is 65515, although this value can be changed.
+   * **Enable Key Vault Access**: Select Disabled unless your configuration specifically requires this setting.
 4. Select **Review + create** to run validation.
 5. After validation passes, select **Create** to deploy the VPN gateway.

includes/vpn-gateway-add-azgw-portal-include.md

@@ -18,7 +18,9 @@
    * **Name**: This is the name of the gateway object you're creating. This is different than the gateway subnet to which gateway resources will be deployed.
    * **Region**: Select the region in which you want to create this resource. The region for the gateway must be the same as the virtual network.
    * **Gateway type**: Select **VPN**. VPN gateways use the virtual network gateway type **VPN**.
-   * **SKU**: From the dropdown list, select the gateway SKU that supports the features you want to use. For more information about SKUs, see [Gateway SKUs](../articles/vpn-gateway/vpn-gateway-about-vpn-gateway-settings.md#gwsku). To configure a Basic SKU gateway instead, see the [PowerShell](../articles/vpn-gateway/create-gateway-basic-sku-powershell.md) steps.
+   * **SKU**: From the dropdown list, select a [gateway SKU](../articles/vpn-gateway/about-gateway-skus.md) that supports the features you want to use.
+      * We recommend that you select a SKU that ends in AZ when possible. AZ SKUs support [availability zones](../articles/vpn-gateway/about-zone-redundant-vnet-gateways.md).
+      * The Basic SKU isn't available in the portal. To configure a Basic SKU gateway, you must use [PowerShell](../articles/vpn-gateway/create-gateway-basic-sku-powershell.md) or CLI.
    * **Generation**: Select **Generation2** from the dropdown.
    * **Virtual network**: From the dropdown list, select the virtual network to which you want to add this gateway. If you can't see the virtual network you want to use, make sure you selected the correct subscription and region in the previous settings.
    * **Gateway subnet address range** or **Subnet**: The gateway subnet is required to create a VPN gateway.