Skip to content

Commit c060045

Browse files
Merge pull request #217612 from khdownie/kendownie110822-2
initialized gatewaySubnet variable
2 parents e373e10 + 4fc4113 commit c060045

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

articles/storage/files/storage-files-configure-p2s-vpn-windows.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
---
2-
title: Configure a Point-to-Site (P2S) VPN on Windows for use with Azure Files | Microsoft Docs
2+
title: Configure a Point-to-Site (P2S) VPN on Windows for use with Azure Files
33
description: How to configure a Point-to-Site (P2S) VPN on Windows for use with Azure Files
44
author: khdownie
55
ms.service: storage
66
ms.topic: how-to
7-
ms.date: 05/27/2022
7+
ms.date: 11/08/2022
88
ms.author: kendownie
99
ms.subservice: files
1010
ms.custom: devx-track-azurepowershell
@@ -31,7 +31,7 @@ The article details the steps to configure a Point-to-Site VPN on Windows (Windo
3131

3232
- A virtual network with a private endpoint for the storage account containing the Azure file share you want to mount on-premises. To learn more about how to create a private endpoint, see [Configuring Azure Files network endpoints](storage-files-networking-endpoints.md?tabs=azure-powershell).
3333

34-
- A [gateway subnet](../../vpn-gateway/vpn-gateway-about-vpn-gateway-settings.md#gwsub) must be created on the virtual network.
34+
- A [gateway subnet](../../vpn-gateway/vpn-gateway-about-vpn-gateway-settings.md#gwsub) must be created on the virtual network, and you'll need to know the name of the gateway subnet.
3535

3636
## Collect environment information
3737
In order to set up the point-to-site VPN, we first need to collect some information about your environment for use throughout the guide. See the [prerequisites](#prerequisites) section if you have not already created a storage account, virtual network, gateway subnet, and/or private endpoints.
@@ -127,7 +127,7 @@ Deploying this service requires two basic components:
127127
1. A public IP address that will identify the gateway to your clients wherever they are in the world
128128
2. The root certificate you created earlier, which will be used to authenticate your clients
129129

130-
Remember to replace `<desired-vpn-name-here>` and `<desired-region-here>` in the below script with the proper values for these variables.
130+
Remember to replace `<desired-vpn-name-here>`, `<desired-region-here>`, and `<gateway-subnet-name-here>` in the below script with the proper values for these variables.
131131

132132
> [!Note]
133133
> Deploying the Azure virtual network gateway can take up to 45 minutes. While this resource is being deployed, this PowerShell script will block for the deployment to be completed. This is expected.
@@ -136,6 +136,7 @@ Remember to replace `<desired-vpn-name-here>` and `<desired-region-here>` in the
136136
$vpnName = "<desired-vpn-name-here>"
137137
$publicIpAddressName = "$vpnName-PublicIP"
138138
$region = "<desired-region-here>"
139+
$gatewaySubnet = "<gateway-subnet-name-here>"
139140
140141
$publicIPAddress = New-AzPublicIpAddress `
141142
-ResourceGroupName $resourceGroupName `
@@ -212,7 +213,7 @@ Export-PfxCertificate `
212213
```
213214

214215
## Configure the VPN client
215-
The Azure virtual network gateway will create a downloadable package with configuration files required to initialize the VPN connection on your on-premises Windows machine. We will configure the VPN connection using the [Always On VPN](/windows-server/remote/remote-access/vpn/always-on-vpn/) feature of Windows 10/Windows Server 2016+. This package also contains executable packages which will configure the legacy Windows VPN client, if so desired. This guide uses Always On VPN rather than the legacy Windows VPN client as the Always On VPN client allows end-users to connect/disconnect from the Azure VPN without having administrator permissions to their machine.
216+
The Azure virtual network gateway will create a downloadable package with configuration files required to initialize the VPN connection on your on-premises Windows machine. We will configure the VPN connection using the [Always On VPN](/windows-server/remote/remote-access/vpn/always-on-vpn/) feature introduced in Windows 10/Windows Server 2016. This package also contains executable packages which will configure the legacy Windows VPN client, if so desired. This guide uses Always On VPN rather than the legacy Windows VPN client as the Always On VPN client allows end-users to connect/disconnect from the Azure VPN without having administrator permissions to their machine.
216217

217218
The following script will install the client certificate required for authentication against the virtual network gateway, download, and install the VPN package. Remember to replace `<computer1>` and `<computer2>` with the desired computers. You can run this script on as many machines as you desire by adding more PowerShell sessions to the `$sessions` array. Your use account must be an administrator on each of these machines. If one of these machines is the local machine you are running the script from, you must run the script from an elevated PowerShell session.
218219

0 commit comments

Comments
 (0)