Skip to content

Commit fb1915d

Browse files
authored
Merge pull request #227501 from cherylmc/Client-address-pools
Pencil edits
2 parents 2792831 + d9cde26 commit fb1915d

File tree

1 file changed

+19
-30
lines changed

1 file changed

+19
-30
lines changed

articles/virtual-wan/about-client-address-pools.md

Lines changed: 19 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -1,78 +1,67 @@
11
---
22
title: 'About client address pools for P2S User VPN'
33
titleSuffix: Azure Virtual WAN
4-
description: Learn about client address pools for User VPN P2S.
4+
description: Learn about client address pools for P2S User VPN.
55
author: cherylmc
66
ms.service: virtual-wan
77
ms.topic: conceptual
8-
ms.date: 02/13/2023
8+
ms.date: 02/15/2023
99
ms.author: cherylmc
1010

1111
---
12-
# About client address pools for point-to-site configurations
12+
# About client address pools for Virtual WAN point-to-site configurations
1313

14-
This article describes Virtual WAN guidelines and requirements for allocating client address spaces.
14+
This article describes Virtual WAN guidelines and requirements for allocating client address spaces. Point-to-site VPN gateways in a Virtual WAN hub are deployed with one or more highly available gateway instances. Each instance of a point-to-site VPN gateway can support up to 10,000 concurrent connections. As a result, for scale units greater than 40 (support for more than 10,000 concurrent connections), Virtual WAN deploys an extra gateway instance to service every 10,000 additional connecting users.
1515

16-
## Background
17-
18-
Point-to-site VPN gateways in the Virtual WAN hub are deployed with one or more highly available gateway instances. Each instance of a point-to-site VPN gateway can support up to 10,000 concurrent connections.
19-
20-
As a result, for scale units greater than 40 (support for more than 10,000 concurrent connections), Virtual WAN deploys an extra gateway instance to service every 10,000 additional connecting users.
21-
22-
When a user connects to Virtual WAN, the connection is automatically load-balanced to all backend gateway instances. To ensure each Gateway instance can service connections, each gateway instance must have at least one unique address pool.
23-
24-
For instance, if a scale unit of 100 is chosen, 5 gateway instances are deployed. This deployment can support 50,000 concurrent connections and **at least** 5 distinct address pools must be specified.
16+
When a user connects to Virtual WAN, the connection is automatically load-balanced to all backend gateway instances. To ensure each gateway instance can service connections, each gateway instance must have at least one unique address pool. For example, if you choose a scale unit of 100, 5 gateway instances are deployed. This deployment can support 50,000 concurrent connections and you need to specify **at least** 5 distinct address pools.
2517

2618
## Address pools and multi-pool/user groups
2719

28-
> [!NOTE]
29-
> There is no minimum scale unit required for the multi-pool/user group feature as long as sufficient address pools are allocated as described below.
20+
> [!NOTE]
21+
> There isn't a minimum scale unit required for the multi-pool/user group feature as long as sufficient address pools are allocated.
3022
31-
When a gateway is configured with the [multi-pool/user group feature](user-groups-about.md), multiple connection configurations are installed on the same Point-to-site VPN Gateway. Users from any group can connect to any gateway instance, meaning each connection configuration needs to have at least one address pool for every backend gateway instance.
23+
When a gateway is configured with the [multi-pool/user group feature](user-groups-about.md), multiple connection configurations are installed on the same point-to-site VPN gateway. Users from any group can connect to any gateway instance, meaning each connection configuration needs to have at least one address pool for every backend gateway instance. For example, if a scale unit of 100 is chosen (5 gateway instances) on a gateway with three separate connection configurations, each configuration needs at least 5 address pools (total of 15 pools).
3224

33-
For instance, if a scale unit of 100 is chosen (5 gateway instances) on a gateway with three separate connection configurations, each configuration will need at least 5 address pools (total of 15 pools).
34-
35-
| Connection Configuration | Associated User Groups | Minimum number of address pools |
25+
| Connection configuration | Associated user groups | Minimum number of address pools |
3626
| --- | --- | ---|
3727
| Configuration 1| Finance, Human Resources | 5 |
3828
| Configuration 2| Engineering, Product Management| 5|
3929
| Configuration 3| Marketing | 5|
4030

4131
**Available scale units**
4232

43-
The following table summarizes the available scale unit choices for Point-to-site VPN Gateway.
33+
The following table summarizes the available scale unit choices for P2S User VPN gateways.
4434

45-
| Scale unit | Gateway Instances| Maximum supported clients | Minimum number of address pools per connection configuration|
35+
| Scale unit | Gateway instances| Maximum supported clients | Minimum number of address pools per connection configuration|
4636
|--- |--- |--- | --- |
47-
1-20| 1| 500-10000 | 1|
37+
|1-20| 1| 500-10000 | 1|
4838
| 40 | 2| 20000 | 2 |
49-
| 60 | 3|30000 | 3 |
39+
| 60 | 3|30000 | 3 |
5040
| 80 | 4| 40000 | 4 |
5141
| 100 | 5 | 50000 | 5 |
5242
| 120 | 6| 60000 | 6 |
5343
| 140 | 7 | 70000 | 7 |
5444
| 160 | 8 | 80000 | 8 |
5545
| 180 | 9 | 90000 | 9 |
5646
| 200 | 10 |100000 | 10 |
57-
47+
5848
## <a name="specify-address-pools"></a>Specifying address pools
5949

60-
Point-to-site VPN address pool assignments are done automatically by Virtual WAN. See the following basic guidelines for specifying address pools.
50+
Virtual WAN automatically creates point-to-site VPN address pool assignments. See the following basic guidelines for specifying address pools.
6151

6252
* One gateway instance allows for a maximum of 10,000 concurrent connections. As such, each address pool should contain at least 10,000 unique IPv4 addresses. If less than 10,000 addresses are assigned to each instance, incoming connections will be rejected after all allocated IP addresses have been assigned.
6353
* Multiple address pool ranges are automatically combined and assigned to a **single** gateway instance. This process is done in a round-robin manner for any gateway instances that have less than 10,000 IP addresses. For example, a pool with 5,000 addresses can be combined automatically by Virtual WAN with another pool that has 8,000 addresses and is assigned to a single gateway instance.
6454
* A single address pool is only assigned to a single gateway instance by Virtual WAN.
6555
* Address pools must be distinct. There can be no overlap between address pools.
6656

57+
> [!NOTE]
58+
> If an address pool is associated to a gateway instance that is undergoing maintenance, the address pool can't be re-assigned to another instance.
6759
68-
> [!NOTE]
69-
> If an address pool is associated to a gateway instance that is undergoing maintenance, the address pool cannot be re-assigned to another instance.
70-
71-
### Example
60+
### Example
7261

7362
The following example describes a situation where 60 scale units support up to 30,000 connections but the allocated address pools results in fewer than 30,000 concurrent connections.
7463

75-
The total number of concurrent connections supported in this setup is 28,192. The first gateway instance supports 10,000 addresses, the second instance 8,192 connections, and the third instance also supports 10,000 addresses.
64+
The total number of concurrent connections supported in this setup is 28,192. The first gateway instance supports 10,000 addresses, the second instance 8,192 connections, and the third instance also supports 10,000 addresses.
7665

7766
| Address pool number | Address pool | Supported connections |
7867
|--- |--- |--- |

0 commit comments

Comments
 (0)