Skip to content

Commit e17edea

Browse files
committed
Fix typos and remove unsed images
1 parent 17f883b commit e17edea

File tree

6 files changed

+7
-19
lines changed

6 files changed

+7
-19
lines changed
Binary file not shown.
Binary file not shown.
Binary file not shown.

articles/vpn-gateway/site-to-site-high-bandwidth-tunnel.md

Lines changed: 7 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.date: 07/14/2025
1212
---
1313

1414
# Create a Site-to-Site High Bandwidth tunnels in the Azure portal
15-
The Azure VPN Gateway High Bandwidth tunnels feature, a part of the Advanaced Connectivity set of features, introduces significant improvements in tunnel throughput, enabling high-performance IPsec connections between the on-premises network and the Azure VNet. These High Bandwidth tunnels are established between a VPN device on-premises and the Azure VPN Gateway deployed in the Azure VNet, transiting through an ExpressRoute private peering. Utilizing private IP address networks on-premises, these tunnels create a secure overlay network between the on-premises infrastructure and the Azure VNet.
15+
The Azure VPN Gateway High Bandwidth tunnels feature, a part of the Advanced Connectivity set of features, introduces significant improvements in tunnel throughput, enabling high-performance IPsec connections between the on-premises network and the Azure VNet. These High Bandwidth tunnels are established between a VPN device on-premises and the Azure VPN Gateway deployed in the Azure VNet, transiting through an ExpressRoute private peering. Utilizing private IP address networks on-premises, these tunnels create a secure overlay network between the on-premises infrastructure and the Azure VNet.
1616

1717
The High Bandwidth tunnels meet customer security compliance requirements by providing end-to-end encryption, effectively overcoming encryption bottlenecks. It allows for the establishment of four tunnels between the Azure VPN Gateway and the on-premises VPN device. The High Bandwidth tunnels allows the creation of two Connections with two IPsec tunnels for each Connection. Each IPsec tunnel can deliver a throughput of 5Gbps, achieving a total encrypted aggregate throughput of 20Gbps. The network diagram clarifies the configuration:
1818

@@ -27,8 +27,8 @@ The full list of required objects are:
2727
- ExpressRoute Direct Port
2828
- ExpressRoute Circuit
2929
- ExpressRoute Virtual Network Gateway
30-
- Connection between the ExpressRoute circuit and the virtual network gateway WITH fastpath enabled.
31-
- VPN Gateway of sku type VpnGw5AZ with Advanaced Connectivity enabled
30+
- Connection between the ExpressRoute circuit and the virtual network gateway WITH FastPath enabled.
31+
- VPN Gateway of sku type VpnGw5AZ with Advanced Connectivity enabled
3232
- VPN Local Network Gateway
3333
- User Defined Route (UDR) to push ER traffic to the VPN Gateway
3434

@@ -41,7 +41,7 @@ The ExpressRoute Gateway can be only deployed in the GatewaySubnet. The ExpressR
4141
![2]
4242

4343
## <a name="VNetGateway"></a>Create an ExpressRoute Connection
44-
The ExpressRoute connection establishes a link between the ExpressRoute Gateway and the ExpressRoute circuit. The FastPath feature can be enabled in the ExpressRoute Connection by the following powershell command:
44+
The ExpressRoute connection establishes a link between the ExpressRoute Gateway and the ExpressRoute circuit. The FastPath feature can be enabled in the ExpressRoute Connection by the following PowerShell command:
4545

4646
```powershell
4747
Connect-AzAccount
@@ -68,7 +68,7 @@ At this stage of deployment, the Azure VNet is connected to the on-premises netw
6868
## <a name="on-premises network"></a>Advertisement of the on-premises network to the ExpressRoute circuit
6969
IPsec tunnels are established via transit through ExpressRoute private peering. To enable these tunnels, the private IP addresses of the on-premises VPN devices must be advertised from the customer’s edge routers to the Microsoft Enterprise Edge (MSEE) routers. If other on-prem networks are advertised to ExpressRoute, this runs the risk of "leaking" these routes to the VNet which could bypass the VPN Gateway and traffic could go directly to the ExpressRoute gateway, bypassing encryption. So it's important to only advertise the VPN Device tunnel IPs over ExpressRoute.
7070

71-
The routes between the VPN Device and the VPN Gateway should contain the detailed on-prem networks, this can be via static routes or BGP, but keep your on-prem networks in this routeing "channel" to ensure Azure traffic to on-prem is encrypted before entering the ExpressRoute data path (insdide the VPN tunnel).
71+
The routes between the VPN Device and the VPN Gateway should contain the detailed on-prem networks, this can be via static routes or BGP, but keep your on-prem networks in this routeing "channel" to ensure Azure traffic to on-prem is encrypted before entering the ExpressRoute data path (inside the VPN tunnel).
7272

7373
If you do add routes to ExpressRoute that you wish to encrypt, a UDR will be needed on the VNets pointing to the VPN Gateway as the next hop to ensure that traffic is put into the encrypted tunnel before transiting ExpressRoute.
7474

@@ -102,7 +102,7 @@ In the Azure portal:
102102

103103
> [!NOTE]
104104
> To select the High Bandwidth VPN Gateway in the Azure portal, enable the **Enable Advanced Connectivity** property during gateway creation. When this option is selected, Azure automatically configures the gateway in active-active mode.
105-
> High Banwidth tunnels can be deployed with static routing or BGP. The High Bandwidth tunnels is supported only in VPN Gateway route-based.
105+
> High Bandwidth tunnels can be deployed with static routing or BGP. The High Bandwidth tunnels is supported only in VPN Gateway route-based.
106106
107107
A gateway can take 45 minutes or more to fully create and deploy. You can see the deployment status on the **Overview** page for your gateway.
108108

@@ -270,7 +270,7 @@ For more information about VPN Gateway, see the [VPN Gateway FAQ](vpn-gateway-vp
270270
[3]: ./media/site-to-site-high-bandwidth-tunnel/expressroute-connection-fastpath.png "ExpressRoute Connection with FastPath enabled"
271271
[4]: ./media/site-to-site-high-bandwidth-tunnel/vpn-gw-hb.png "VPN Gateway High Bandwidth tunnels"
272272
[5]: ./media/site-to-site-high-bandwidth-tunnel/vpn-gw-hb2.png "VPN Gateway High Bandwidth tunnels"
273-
[6]: ./media/site-to-site-high-bandwidth-tunnel/vpn-onprem-ip-addresses.png "IP addreses VPN device on-premises"
273+
[6]: ./media/site-to-site-high-bandwidth-tunnel/vpn-onprem-ip-addresses.png "IP addresses VPN device on-premises"
274274
[7]: ./media/site-to-site-high-bandwidth-tunnel/local-net-gw1.png "Local Network Gateway1"
275275
[8]: ./media/site-to-site-high-bandwidth-tunnel/local-net-gw2.png "Local Network Gateway2"
276276
[9]: ./media/site-to-site-high-bandwidth-tunnel/vpn-conn1a.png "VPN Connection1"
@@ -282,15 +282,3 @@ For more information about VPN Gateway, see the [VPN Gateway FAQ](vpn-gateway-vp
282282
[15]: ./media/site-to-site-high-bandwidth-tunnel/list-connections.png "VPN Connection List"
283283
[16]: ./media/site-to-site-high-bandwidth-tunnel/tunnel-ips.png "Tunnel IPs"
284284
[17]: ./media/site-to-site-high-bandwidth-tunnel/s2s-tunnels-azure-onprem.png "IPsec tunnels between on-premises device and Azure VPN Gateway"
285-
[18]:
286-
[19]:
287-
288-
[1]: ./media/site-to-site-high-bandwidth-tunnel/advertisement-net-onprem.png
289-
[1]: ./media/site-to-site-high-bandwidth-tunnel/er-circuit.png
290-
[1]: ./media/site-to-site-high-bandwidth-tunnel/er-connection-validation.png
291-
[1]: ./media/site-to-site-high-bandwidth-tunnel/er-connection.png
292-
[1]: ./media/site-to-site-high-bandwidth-tunnel/list-resources.png
293-
294-
295-
296-

0 commit comments

Comments
 (0)