Merge pull request #302526 from fabferri/patch-11

Update tutorial-site-to-site-portal.md

Author: prmerger-automator[bot]

articles/vpn-gateway/tutorial-site-to-site-portal.md

@@ -6,7 +6,7 @@ author: cherylmc
 ms.author: cherylmc
 ms.service: azure-vpn-gateway
 ms.topic: tutorial
-ms.date: 06/24/2025
+ms.date: 07/09/2025
 
 #customer intent: As a network engineer, I want to create a site-to-site VPN connection between my on-premises location and my Azure virtual network.
 # Customer intent: As a network engineer, I want to create a site-to-site VPN connection between my on-premises network and Azure, so that I can ensure secure and reliable connectivity for my resources in the cloud.
@@ -18,6 +18,8 @@ In this tutorial, you use the Azure portal to create a site-to-site (S2S) VPN ga
 
 :::image type="content" source="./media/tutorial-site-to-site-portal/diagram.png" alt-text="Diagram that shows site-to-site VPN gateway cross-premises connections." lightbox="./media/tutorial-site-to-site-portal/diagram.png":::
 
+## What you accomplish
+
 In this tutorial, you:
 
 > [!div class="checklist"]
@@ -28,6 +30,8 @@ In this tutorial, you:
 > * Verify the connection.
 > * Connect to a virtual machine.
 
+**Estimated time to complete**: 90-120 minutes (including gateway deployment time)
+
 ## Prerequisites
 
 * You need an Azure account with an active subscription. If you don't have one, you can [create one for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
@@ -47,7 +51,7 @@ In this section, you create a virtual network by using the following values:
 * **Region**: (US) East US
 * **IPv4 address space**: 10.1.0.0/16
 * **Subnet name**: FrontEnd
-* **Subnet address space**: 
+* **Subnet address space**: 10.1.0.0/24
 [!INCLUDE [About cross-premises addresses](../../includes/vpn-gateway-cross-premises.md)]
 
 [!INCLUDE [Create a virtual network](../../includes/vpn-gateway-basic-vnet-rm-portal-include.md)]
@@ -116,7 +120,7 @@ Create a local network gateway by using the following values:
 
 Site-to-site connections to an on-premises network require a VPN device. In this step, you configure your VPN device. When you configure your VPN device, you need the following values:
 
-* **Shared key**: This shared key is the same one that you specify when you create your site-to-site VPN connection. In our examples, we use a simple shared key. We recommend that you generate a more complex key to use.
+* **Shared key**: This shared key is the same one that you specify when you create your site-to-site VPN connection. In our examples, we use a simple shared key. We recommend that you generate a more complex key to use, with at least 32 characters, including a mix of uppercase and lowercase letters, numbers, and special characters.
 * **Public IP addresses of your virtual network gateway instances**: Obtain the IP address for each VM instance. If your gateway is in active-active mode, you'll have an IP address for each gateway VM instance. Be sure to configure your device with both IP addresses, one for each active gateway VM. Active-standby mode gateways have only one IP address.
 
 > [!NOTE]