|
1 | 1 | ---
|
2 | 2 | title: 'About client address pools for P2S User VPN'
|
3 | 3 | titleSuffix: Azure Virtual WAN
|
4 |
| -description: Learn about client address pools for User VPN P2S. |
| 4 | +description: Learn about client address pools for P2S User VPN. |
5 | 5 | author: cherylmc
|
6 | 6 | ms.service: virtual-wan
|
7 | 7 | ms.topic: conceptual
|
8 |
| -ms.date: 02/13/2023 |
| 8 | +ms.date: 02/15/2023 |
9 | 9 | ms.author: cherylmc
|
10 | 10 |
|
11 | 11 | ---
|
12 |
| -# About client address pools for point-to-site configurations |
| 12 | +# About client address pools for Virtual WAN point-to-site configurations |
13 | 13 |
|
14 |
| -This article describes Virtual WAN guidelines and requirements for allocating client address spaces. |
| 14 | +This article describes Virtual WAN guidelines and requirements for allocating client address spaces. Point-to-site VPN gateways in a Virtual WAN hub are deployed with one or more highly available gateway instances. Each instance of a point-to-site VPN gateway can support up to 10,000 concurrent connections. As a result, for scale units greater than 40 (support for more than 10,000 concurrent connections), Virtual WAN deploys an extra gateway instance to service every 10,000 additional connecting users. |
15 | 15 |
|
16 |
| -## Background |
17 |
| - |
18 |
| -Point-to-site VPN gateways in the Virtual WAN hub are deployed with one or more highly available gateway instances. Each instance of a point-to-site VPN gateway can support up to 10,000 concurrent connections. |
19 |
| - |
20 |
| -As a result, for scale units greater than 40 (support for more than 10,000 concurrent connections), Virtual WAN deploys an extra gateway instance to service every 10,000 additional connecting users. |
21 |
| - |
22 |
| -When a user connects to Virtual WAN, the connection is automatically load-balanced to all backend gateway instances. To ensure each Gateway instance can service connections, each gateway instance must have at least one unique address pool. |
23 |
| - |
24 |
| -For instance, if a scale unit of 100 is chosen, 5 gateway instances are deployed. This deployment can support 50,000 concurrent connections and **at least** 5 distinct address pools must be specified. |
| 16 | +When a user connects to Virtual WAN, the connection is automatically load-balanced to all backend gateway instances. To ensure each gateway instance can service connections, each gateway instance must have at least one unique address pool. For example, if you choose a scale unit of 100, 5 gateway instances are deployed. This deployment can support 50,000 concurrent connections and you need to specify **at least** 5 distinct address pools. |
25 | 17 |
|
26 | 18 | ## Address pools and multi-pool/user groups
|
27 | 19 |
|
28 |
| -> [!NOTE] |
29 |
| -> There is no minimum scale unit required for the multi-pool/user group feature as long as sufficient address pools are allocated as described below. |
| 20 | +> [!NOTE] |
| 21 | +> There isn't a minimum scale unit required for the multi-pool/user group feature as long as sufficient address pools are allocated. |
30 | 22 |
|
31 |
| -When a gateway is configured with the [multi-pool/user group feature](user-groups-about.md), multiple connection configurations are installed on the same Point-to-site VPN Gateway. Users from any group can connect to any gateway instance, meaning each connection configuration needs to have at least one address pool for every backend gateway instance. |
| 23 | +When a gateway is configured with the [multi-pool/user group feature](user-groups-about.md), multiple connection configurations are installed on the same point-to-site VPN gateway. Users from any group can connect to any gateway instance, meaning each connection configuration needs to have at least one address pool for every backend gateway instance. For example, if a scale unit of 100 is chosen (5 gateway instances) on a gateway with three separate connection configurations, each configuration needs at least 5 address pools (total of 15 pools). |
32 | 24 |
|
33 |
| -For instance, if a scale unit of 100 is chosen (5 gateway instances) on a gateway with three separate connection configurations, each configuration will need at least 5 address pools (total of 15 pools). |
34 |
| - |
35 |
| -| Connection Configuration | Associated User Groups | Minimum number of address pools | |
| 25 | +| Connection configuration | Associated user groups | Minimum number of address pools | |
36 | 26 | | --- | --- | ---|
|
37 | 27 | | Configuration 1| Finance, Human Resources | 5 |
|
38 | 28 | | Configuration 2| Engineering, Product Management| 5|
|
39 | 29 | | Configuration 3| Marketing | 5|
|
40 | 30 |
|
41 | 31 | **Available scale units**
|
42 | 32 |
|
43 |
| -The following table summarizes the available scale unit choices for Point-to-site VPN Gateway. |
| 33 | +The following table summarizes the available scale unit choices for P2S User VPN gateways. |
44 | 34 |
|
45 |
| -| Scale unit | Gateway Instances| Maximum supported clients | Minimum number of address pools per connection configuration| |
| 35 | +| Scale unit | Gateway instances| Maximum supported clients | Minimum number of address pools per connection configuration| |
46 | 36 | |--- |--- |--- | --- |
|
47 |
| -1-20| 1| 500-10000 | 1| |
| 37 | +|1-20| 1| 500-10000 | 1| |
48 | 38 | | 40 | 2| 20000 | 2 |
|
49 |
| -| 60 | 3|30000 | 3 | |
| 39 | +| 60 | 3|30000 | 3 | |
50 | 40 | | 80 | 4| 40000 | 4 |
|
51 | 41 | | 100 | 5 | 50000 | 5 |
|
52 | 42 | | 120 | 6| 60000 | 6 |
|
53 | 43 | | 140 | 7 | 70000 | 7 |
|
54 | 44 | | 160 | 8 | 80000 | 8 |
|
55 | 45 | | 180 | 9 | 90000 | 9 |
|
56 | 46 | | 200 | 10 |100000 | 10 |
|
57 |
| - |
| 47 | + |
58 | 48 | ## <a name="specify-address-pools"></a>Specifying address pools
|
59 | 49 |
|
60 |
| -Point-to-site VPN address pool assignments are done automatically by Virtual WAN. See the following basic guidelines for specifying address pools. |
| 50 | +Virtual WAN automatically creates point-to-site VPN address pool assignments. See the following basic guidelines for specifying address pools. |
61 | 51 |
|
62 | 52 | * One gateway instance allows for a maximum of 10,000 concurrent connections. As such, each address pool should contain at least 10,000 unique IPv4 addresses. If less than 10,000 addresses are assigned to each instance, incoming connections will be rejected after all allocated IP addresses have been assigned.
|
63 | 53 | * Multiple address pool ranges are automatically combined and assigned to a **single** gateway instance. This process is done in a round-robin manner for any gateway instances that have less than 10,000 IP addresses. For example, a pool with 5,000 addresses can be combined automatically by Virtual WAN with another pool that has 8,000 addresses and is assigned to a single gateway instance.
|
64 | 54 | * A single address pool is only assigned to a single gateway instance by Virtual WAN.
|
65 | 55 | * Address pools must be distinct. There can be no overlap between address pools.
|
66 | 56 |
|
| 57 | +> [!NOTE] |
| 58 | +> If an address pool is associated to a gateway instance that is undergoing maintenance, the address pool can't be re-assigned to another instance. |
67 | 59 |
|
68 |
| -> [!NOTE] |
69 |
| -> If an address pool is associated to a gateway instance that is undergoing maintenance, the address pool cannot be re-assigned to another instance. |
70 |
| -
|
71 |
| -### Example |
| 60 | +### Example |
72 | 61 |
|
73 | 62 | The following example describes a situation where 60 scale units support up to 30,000 connections but the allocated address pools results in fewer than 30,000 concurrent connections.
|
74 | 63 |
|
75 |
| -The total number of concurrent connections supported in this setup is 28,192. The first gateway instance supports 10,000 addresses, the second instance 8,192 connections, and the third instance also supports 10,000 addresses. |
| 64 | +The total number of concurrent connections supported in this setup is 28,192. The first gateway instance supports 10,000 addresses, the second instance 8,192 connections, and the third instance also supports 10,000 addresses. |
76 | 65 |
|
77 | 66 | | Address pool number | Address pool | Supported connections |
|
78 | 67 | |--- |--- |--- |
|
|
0 commit comments