Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
0 answers
Upgrading the VPN gateway from VPNGw1 to VPNGw1AZ
現在、Microsoft Azureで使用しているVPNゲートウェイのSKUはVPNGw1でありサポートが終了されました。当該VPNゲートウェイのSKUをVPNGw1AZに手動で更新を行おうとしたところ、「仮想ネットワーク ゲートウェイは、移行プロセス中です。ゲートウェイに変更を加えることはできません。」と表示され更新する事ができません。 １．自動的にVPNGw1AZに更新されるのでしょうか。 ２．手動で更新が必要な場合は更新方法が知りたいです。 よろしくお願いします。
Azure VPN Gateway
asked
2026-10-02T03:01:12.08+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 96%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENT%3C/text%3E%3C/svg%3E)
NAKAJIMA Takayuki (中島 隆行)
0
Reputation points
edited the question
2026-10-02T03:36:25.6566667+00:00
TP
163.9K
Reputation points
Volunteer Moderator
2 answers
Virtual Network Gateway no longer receiving ingress traffic
We have a Virtual Network Gateway configured to connect our on-premise network to our Azure virtual network over an IKEv2 tunnel. This tunnel has been configured and working for years. As of a few days ago, we are no longer able to send traffic over the…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-29T14:14:37.8933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 96%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECD%3C/text%3E%3C/svg%3E)
Cody Durand
40
Reputation points
answered
2026-09-30T14:27:55.51+00:00
Cody Durand
40
Reputation points
3 answers
VPN Gateway: Upgrade from VpnGw1 to VpnGw1AZ — Deployment Validation Failure
Problem description I am trying to upgrade my Azure VPN Gateway from SKU VpnGw1 to VpnGw1AZ, but the deployment fails during validation. The only error captured is "Deployment validation failed". I need assistance understanding the specific…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-29T11:04:45.6533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 0%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMK%3C/text%3E%3C/svg%3E)
Mathew K Varghese
0
Reputation points
answered
2026-09-30T04:34:08.5966667+00:00
Mathew K Varghese
0
Reputation points
2 answers
Azure VPN Gateway – Does a GatewaySubnet UDR Apply to Traffic Entering the VPN Gateway from the VNet Side?
Azure VPN Gateway – Does a GatewaySubnet UDR Apply to Traffic Entering the VPN Gateway from the VNet Side? I’m trying to clarify exactly when an Azure VPN Gateway respects a route table (UDR) associated with the GatewaySubnet. Assume I have a VPN Gateway…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-24T07:35:41.6433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 92%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPS%3C/text%3E%3C/svg%3E)
Peter Stieber
70
Reputation points
commented
2026-09-29T13:14:22.9266667+00:00
Allan Solomon Mejia
10,145
Reputation points
1 answer
Azure VPN client error 628 after changing from sstp to IKEv2
Hello, I make the mistake to convert the sstp to IKEv2 and now I can't make it work. We use point to site from our Azure VM to our employee WFH. I checked certificate, deleted the VPN on client machine and reinstall the latest, delete the gateway and…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-28T21:08:29.9+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 28.999999999999996%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAH%3C/text%3E%3C/svg%3E)
Arnaud Henry-Lefort
0
Reputation points
commented
2026-09-29T07:10:36.7933333+00:00
Arnaud Henry-Lefort
0
Reputation points
0 answers
VPN Gateway: Traffic Drop Inside of S2S VPN — Investigation and Troubleshooting
I am not permitted to share this information outside of my company, and therefore need a support engineer. Please continue through secure channels.
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-28T21:05:58.5833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 94%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Michael Schultz
0
Reputation points
asked
2026-09-28T21:05:58.5833333+00:00
Michael Schultz
0
Reputation points
1 answer
Is RADIUS/EAP-TLS supported for native Windows Always On VPN Device Tunnel before user sign-in?
Hello, I would like to confirm whether native Windows Always On VPN Device Tunnel can use RADIUS/NPS with certificate-based authentication through Azure VPN Gateway. My requirement is specifically automatic connectivity before any interactive user…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-16T09:16:44.8666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 75%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMK%3C/text%3E%3C/svg%3E)
Maciej Kurzeja
100
Reputation points
edited an answer
2026-09-28T16:52:40.2966667+00:00
Taz
10,046
Reputation points MVP
Volunteer Moderator
1 answer
VPN Gateway- S2S connection Failing
We are facing an intermittent connectivity issue between our on-premises network and Azure over a Site-to-Site VPN. Environment: Azure VPN Gateway SKU: VpnGw1AZ VPN type: Route-based The existing Azure route for 172.19.0.0/16 is advertised on the…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-28T12:25:54.7566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 49%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Abrar Adil S
476
Reputation points
answered
2026-09-28T12:43:32.83+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 52%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERE%3C/text%3E%3C/svg%3E)
Rukshan edirisinghe
910
Reputation points
1 answer
Azure S2S VPN Connectivity Restored After Updating Local Network Gateway Address Space – VpnGw1AZ
We are facing an intermittent connectivity issue between our on-premises network and Azure over a Site-to-Site VPN. Environment: Azure VPN Gateway SKU: VpnGw1AZ VPN type: Route-based During the failure: The client sends TCP SYN packets towards…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-24T07:41:53.9366667+00:00
Abrar Adil S
476
Reputation points
answered
2026-09-24T19:57:39.3166667+00:00
Allan Solomon Mejia
10,145
Reputation points
2 answers
One of the answers was accepted by the question author.
Azure VPN (basic) P2S won't connect using IKEv2
I have an Azure VPN (Basic SKU) that has been working fine using SSTP for Point-to-site connections. I tried following the steps in migrate your VPN gateway (Option 1) to migrate to IKEv2. However, the new VPN client never connects - it just sits at…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-09T20:14:37.6966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 28.000000000000004%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA2%3C/text%3E%3C/svg%3E)
Adam-2452
20
Reputation points
commented
2026-09-24T19:50:44.5366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 28.000000000000004%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMB%3C/text%3E%3C/svg%3E)
Marco Brouwer
80
Reputation points
0 answers
Cisco 8000V router for VPN with expressroute
I have a setup with ExpressRoute + Site to Site VPN connecting on-premises and Azure. I want to use Cisco's virtual router C8000v for VPN instead of VPN network Gateway. Need to make this change to have advanced routing features. Anyone have implemented…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
Azure ExpressRoute
Azure ExpressRoute
An Azure service that provides private connections between Azure datacenters and infrastructure, either on premises or in a colocation environment.
517 questions
asked
2023-10-18T10:56:11.98+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 39%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMB%3C/text%3E%3C/svg%3E)
Mateen Baig
71
Reputation points
3 answers
VPN Gateway Connection is Unknown
I try to add another site to site using azure vpn gateway and my fortigate. But in this new vpn gateway the connection always in state 'unknown' and from my fortigate i can see timeout. I do packet sniffer to the new vpn gateway and found there is no…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-18T00:00:45.2666667+00:00
Handian Sudianto
7,471
Reputation points
commented
2026-09-19T04:21:01.3833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 50%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESC%3C/text%3E%3C/svg%3E)
SHOUMIK CHAKRAVARTY
990
Reputation points
2 answers
Tracking Cost of Data Transfer on VPN Gateway
Hello, If we have conenction from onprem to the azure thru site to site conenction then we only pay for data come out from azure to the onprem and data in from onprem to the azure is not billable? How we can know how much data in and data out every day?
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-18T11:44:32.8233333+00:00
Handian Sudianto
7,471
Reputation points
answered
2026-09-18T17:20:23.0933333+00:00
Andreas Baumgarten
132.9K
Reputation points MVP
Volunteer Moderator
3 answers
BGP Site to site VPN learned routes still in table despite the BGP peer down for a week
we see that the learned routes are still available with no BGP peer, this was notices as I wanted to be sure that the BGP filter on the remote end was working , We have a filter on the FortiGate this is working and confirmed by FortiGate support. The…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-08-18T12:52:39.9666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 66%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBE%3C/text%3E%3C/svg%3E)
Brendan Edward Richardson
0
Reputation points
commented
2026-09-16T05:34:22.14+00:00
Brendan Edward Richardson
0
Reputation points
1 answer
VPN Gateway: Unable to Delete or Recreate It After Going Down
Problem description I am experiencing an issue with my Azure VPN Gateway. It went down starting on September 14, 2026, around 10:00 AM Mountain Time, causing a loss of production connectivity. I attempted to delete and recreate the gateway, but it is…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-14T20:36:11.63+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 56.00000000000001%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC2%3C/text%3E%3C/svg%3E)
ChrisGraham-2510
5
Reputation points
answered
2026-09-15T07:15:38.7933333+00:00
Alex Burlachenko
25,290
Reputation points MVP
Volunteer Moderator
1 answer
One of the answers was accepted by the question author.
VPN Client Connection Failures on Windows 11 Since This Morning — Authentication Policy Error
Problem description I am experiencing an issue where all my Windows 11 Point-to-Site VPN clients using IKEv2 and certificate authentication cannot connect to the Azure VPN Gateway since this morning. The error message indicates a policy mismatch during…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 95%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIC%3C/text%3E%3C/svg%3E)
0 answers
P2S VPN (OpenVPN + Entra ID auth) TLS handshake times out after ClientHello — server-side packet capture shows zero packets reach the tenant gateway worker
Summary Point-to-Site VPN connections to a newly provisioned Azure VPN Gateway (OpenVPN protocol, Microsoft Entra ID authentication) consistently fail during the TLS/control-channel handshake, ~14-23 seconds after the client sends its ClientHello.…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-07T08:39:27.0766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 12%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
MAHMOUD Araby
0
Reputation points
asked
2026-09-07T08:39:27.0766667+00:00
MAHMOUD Araby
0
Reputation points
1 answer
VpnGw1AZ gateway creation fails repeatedly with InternalServerError (empty error details)
I'm trying to create/recreate a route-based VPN Gateway (SKU: VpnGw1AZ, Generation2) in North Central US, and every deployment attempt fails with a generic InternalServerError and no further diagnostic detail. Environment: Subscription type: MCPP…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-08-18T10:29:39.9866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 36%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Admin Saxena
0
Reputation points
edited an answer
2026-09-02T16:45:26.3233333+00:00
GitaraniSharma-MSFT
50,287
Reputation points Microsoft Employee
Moderator
1 answer
Azure VM cannot communicate with the on-premises server
We are experiencing an issue with a Site-to-Site IPsec VPN between a FortiGate firewall and an Azure Virtual Network Gateway. Environment Azure Region: East US VPN Gateway SKU: VpnGw1AZ (Route-based) Azure VNet: 10.0.1.0/24 Azure VM: Ubuntu 22.04…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-08-04T13:15:13.1+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 93%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERR%3C/text%3E%3C/svg%3E)
Riyas Razik
0
Reputation points
commented
2026-09-02T15:46:50.06+00:00
Allan Solomon Mejia
10,145
Reputation points
1 answer
Unable to delete a orphaned VPN gateway
I have a VPN gateway which is failed state since it doesn't have any virtual hub attached with it. ubuntu@ip-172-31-19-1:~$ az network vpn-gateway show \ -g QA_Aug \ -n mcn-vpngw-sc-qcrn9z-japaneast \ --query…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,185 questions
asked
2026-09-02T07:38:45.6866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 96%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELV%3C/text%3E%3C/svg%3E)
Lokesh V
0
Reputation points
answered
2026-09-02T07:52:42.39+00:00
Abdul Waqas
345
Reputation points