Merge pull request #243112 from cherylmc/vpn-connectionfix

update public IP screenshots

Author: v-regandowner

includes/media/vpn-gateway-add-gw-pip-portal/pip-details.png

@@ -9,14 +9,14 @@
 ---
 3. Specify in the values for **Public IP address**. These settings specify the public IP address object that gets associated to the VPN gateway. The public IP address is assigned to this object when the VPN gateway is created. The only time the primary public IP address changes is when the gateway is deleted and re-created. It doesn't change across resizing, resetting, or other internal maintenance/upgrades of your VPN gateway.
 
-   :::image type="content" source="./media/vpn-gateway-add-gw-pip-portal/pip-details.png" alt-text="Screenshot of public IP address field." lightbox="./media/vpn-gateway-add-gw-pip-portal/pip-details.png":::
+   :::image type="content" source="./media/vpn-gateway-add-gw-pip-portal/pip-values.png" alt-text="Screenshot of public IP address field." lightbox="./media/vpn-gateway-add-gw-pip-portal/pip-values.png":::
 
-     * **Public IP address type**: You can choose either Basic or Standard.
+     * **Public IP address type**: For this exercise, if you have the option to choose the address type, select **Standard**.
      * **Public IP address**: Leave **Create new** selected.
      * **Public IP address name**: In the text box, type a name for your public IP address instance.
-     * **Public IP address SKU**: This field is controlled by the **Public IP Address Type** value.
-     * **Assignment**: This setting is based on the **Public IP Address Type** value.
-     * **Enable active-active mode**: Only select **Enable active-active mode** if you're creating an active-active gateway configuration. Otherwise, leave this setting **Disabled**.
-     * Leave **Configure BGP** as **Disabled**, unless your configuration specifically requires this setting. If you do require this setting, the default ASN is 65515, although this value can be changed.
+     * **Public IP address SKU**: Setting is autoselected.
+     * **Assignment**: The assignment is typically autoselected and can be either Dynamic or Static.
+     * **Enable active-active mode**: Leave this setting as **Disabled**. Only enable this setting if you're creating an active-active gateway configuration.
+     * **Configure BGP**: Leave this setting as **Disabled**, unless your configuration specifically requires this setting. If you do require this setting, the default ASN is 65515, although this value can be changed.
 4. Select **Review + create** to run validation.
 5. Once validation passes, select **Create** to deploy the VPN gateway.

includes/media/vpn-gateway-add-gw-pip-portal/pip-values.png

@@ -2,23 +2,37 @@
  author: cherylmc
  ms.service: vpn-gateway
  ms.topic: include
- ms.date: 09/14/2022
+ ms.date: 06/26/2023
  ms.author: cherylmc
 ---
 1. Go to your virtual network. On your VNet page, select **Connected devices** on the left. Locate your VPN gateway and click to open it.
-1. On the page for the gateway, select **Connections**. At the top of the Connections page, select **+Add** to open the **Add connection** page.
+1. On the page for the gateway, select **Connections**.
+1. At the top of the Connections page, select **+Add** to open the **Create connection** page.
 
-   :::image type="content" source="./media/vpn-gateway-add-site-to-site-connection-portal-include/connection.png" alt-text="Screenshot of Add Connection page." lightbox="./media/vpn-gateway-add-site-to-site-connection-portal-include/connection.png" :::
-1. On the **Add connection** page, configure the values for your connection.
+   :::image type="content" source="./media/vpn-gateway-add-site-to-site-connection-portal-include/add-connection.png" alt-text="Graphic shows a screenshot of the Basics page." lightbox="./media/vpn-gateway-add-site-to-site-connection-portal-include/add-connection.png":::
+1. On the Create connection **Basics** page, configure the values for your connection.
+   * For **Project details**, select the subscription and the Resource group where your resources are located.
+   * For **Instance details**, configure the following settings:
 
-   * **Name:** Name your connection.
-   * **Connection type:** Select **Site-to-site (IPSec)**.
-   * **Virtual network gateway:** The value is fixed because you're connecting from this gateway.
-   * **Local network gateway:** Select **Choose a local network gateway** and select the local network gateway that you want to use.
-   * **Shared Key:** the value here must match the value that you're using for your local on-premises VPN device. The example uses 'abc123', but you can (and should) use something more complex. It's important that the value you specify here is the same value that you specify when configuring your VPN device.
-   * Leave **Use Azure Private IP Address** unchecked.
-   * Leave **Enable BGP** unchecked.
-   * Select **IKEv2**.
+     * **Connection type:** Select **Site-to-site (IPSec)**.
+     * **Name:** Name your connection.
+     * **Region:** Select the region for this connection.
+1. Select **Settings** to navigate to the settings page.
+
+   :::image type="content" source="./media/vpn-gateway-add-site-to-site-connection-portal-include/settings-page.png" alt-text="Graphic shows a screenshot of the Settings page." lightbox="./media/vpn-gateway-add-site-to-site-connection-portal-include/settings-page.png":::
 
-1. Select **OK** to create your connection. You'll see *Creating Connection* flash on the screen.
-1. You can view the connection in the **Connections** page of the virtual network gateway. The Status will go from *Unknown* to *Connecting*, and then to *Succeeded*.
+   * **Virtual network gateway:** Select the virtual network gateway from the dropdown.
+   * **Local network gateway:** Select the local network gateway from the dropdown.
+   * **Shared Key:** the value here must match the value that you're using for your local on-premises VPN device.
+   * Select **IKEv2**.
+   * Leave **Use Azure Private IP Address** deselected.
+   * Leave **Enable BGP** deselected.
+   * Leave **FastPath** deselected.
+   * **IPse/IKE policy:** Default.
+   * **Use policy based traffic selector:** Disable.
+   * **DPD timeout in seconds:** 45
+   * **Connection Mode:** leave as Default.
+1. For **NAT Rules Associations**, leave both Ingress and Egress as **0 selected**.
+1. Select **Review + create** to validate your connection settings.
+1. Select **Create** to create the connection.
+1. Once the deployment is complete, you can view the connection in the **Connections** page of the virtual network gateway. The Status goes from *Unknown* to *Connecting*, and then to *Succeeded*.