Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
0 answers
Azure VPN (basic) P2S won't connect using IKEv2
I have an Azure VPN (Basic SKU) that has been working fine using SSTP for Point-to-site connections. I tried following the steps in migrate your VPN gateway (Option 1) to migrate to IKEv2. However, the new VPN client never connects - it just sits at…
Azure VPN Gateway
asked
2026-09-09T20:14:37.6966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 28.000000000000004%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Adam
0
Reputation points
0 answers
VPN Client Connection Failures on Windows 11 Since This Morning — Authentication Policy Error
Problem description I am experiencing an issue where all my Windows 11 Point-to-Site VPN clients using IKEv2 and certificate authentication cannot connect to the Azure VPN Gateway since this morning. The error message indicates a policy mismatch during…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 95%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIC%3C/text%3E%3C/svg%3E)
0 answers
P2S VPN (OpenVPN + Entra ID auth) TLS handshake times out after ClientHello — server-side packet capture shows zero packets reach the tenant gateway worker
Summary Point-to-Site VPN connections to a newly provisioned Azure VPN Gateway (OpenVPN protocol, Microsoft Entra ID authentication) consistently fail during the TLS/control-channel handshake, ~14-23 seconds after the client sends its ClientHello.…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-09-07T08:39:27.0766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 12%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
MAHMOUD Araby
0
Reputation points
asked
2026-09-07T08:39:27.0766667+00:00
MAHMOUD Araby
0
Reputation points
1 answer
VpnGw1AZ gateway creation fails repeatedly with InternalServerError (empty error details)
I'm trying to create/recreate a route-based VPN Gateway (SKU: VpnGw1AZ, Generation2) in North Central US, and every deployment attempt fails with a generic InternalServerError and no further diagnostic detail. Environment: Subscription type: MCPP…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-18T10:29:39.9866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 36%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Admin Saxena
0
Reputation points
edited an answer
2026-09-02T16:45:26.3233333+00:00
GitaraniSharma-MSFT
50,287
Reputation points Microsoft Employee
Moderator
1 answer
Azure VM cannot communicate with the on-premises server
We are experiencing an issue with a Site-to-Site IPsec VPN between a FortiGate firewall and an Azure Virtual Network Gateway. Environment Azure Region: East US VPN Gateway SKU: VpnGw1AZ (Route-based) Azure VNet: 10.0.1.0/24 Azure VM: Ubuntu 22.04…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-04T13:15:13.1+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 93%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERR%3C/text%3E%3C/svg%3E)
Riyas Razik
0
Reputation points
commented
2026-09-02T15:46:50.06+00:00
Allan Solomon Mejia
7,915
Reputation points
1 answer
Unable to delete a orphaned VPN gateway
I have a VPN gateway which is failed state since it doesn't have any virtual hub attached with it. ubuntu@ip-172-31-19-1:~$ az network vpn-gateway show \ -g QA_Aug \ -n mcn-vpngw-sc-qcrn9z-japaneast \ --query…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-09-02T07:38:45.6866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 96%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELV%3C/text%3E%3C/svg%3E)
Lokesh V
0
Reputation points
answered
2026-09-02T07:52:42.39+00:00
Abdul Waqas
345
Reputation points
1 answer
Unable to Migrate the VPN Public IP from basic to Standard due to Subnet Limiataion
We are currently facing a challenge while migrating an Azure VPN Gateway that uses a Basic Public IP, as Basic Public IPs are being retired. The existing VPN Gateway is deployed in a spoke VNet and uses a GatewaySubnet that is only /29 in size. Due to…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-06-17T18:32:12.5766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 49%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Abrar Adil S
476
Reputation points
commented
2026-09-02T07:22:48.52+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 30%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBK%3C/text%3E%3C/svg%3E)
Bhavani Kamidi
5
Reputation points Microsoft External Staff
2 answers
VPN Gateway
Will my VpnGw1 be automatically updated to VpnGw1AZ if I do nothing. It is a /27 network and is already using a standard IP.
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-31T15:13:31.9766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 76%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESJ%3C/text%3E%3C/svg%3E)
Schulz, James
10
Reputation points
answered
2026-08-31T15:36:36.72+00:00
TP
163.1K
Reputation points
Volunteer Moderator
4 answers
Meraki MX IPsec VPN Health Check is failing because its return traffic is being blocked in azure (port 80)
I have an IPsec VPN tunnel using a Meraki MX and an Azure virtual network gateway (Basic SKU). The tunnel is good. I'm trying to use a Meraki load balancing feature called "Multi-Uplink IPsec VPN", but the Meraki Health Check is failing…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-21T18:44:25.8633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 19%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
Steve G
0
Reputation points
commented
2026-08-26T16:44:21.2+00:00
Allan Solomon Mejia
7,915
Reputation points
2 answers
Azure VPN Gateway P2S User Groups separate address pool does not work with Machine Certificate (CertificateGroupId)
Hello, I am testing Azure VPN Gateway Point-to-Site VPN with multiple address pools using P2S User Groups and vngClientConnectionConfigurations. My goal is to separate IP address pools for User Tunnel and Device Tunnel on the same VPN Gateway. Current…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-25T13:36:53.97+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 75%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMK%3C/text%3E%3C/svg%3E)
Maciej Kurzeja
100
Reputation points
answered
2026-08-26T07:20:54.2+00:00
Maciej Kurzeja
100
Reputation points
4 answers
Service tag IPs cannot reach the VMs, but normal IPs do work and makes VM reachable.
I need to identify which change do I need and which group or process is in charge of that. (at least for AVNM/VPN) I am tracking a KPI assigned to me and I want to implement Service Tagged IPs to accomplish an SFI policy to maintain public IPs under a…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-03T20:10:38.14+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 6%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECR%3C/text%3E%3C/svg%3E)
Cesar Romo Rangel (INFOSYS LIMITED)
0
Reputation points Microsoft External Staff
commented
2026-08-26T03:49:11.7666667+00:00
Bhavani Kamidi
5
Reputation points Microsoft External Staff
2 answers
How to upgrade VPN Gateway non-AZ SKUs to an VPN Gateway AZ SKUs.
Greetings, Received the following notification from Microsoft regarding my Azure VPN gateway: You’re receiving this notification because you are associated with one or more Azure subscriptions that use Azure VPN Gateway. For reference, you can find this…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-25T13:12:10.5533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 52%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
Jorge Villon, Jr
5
Reputation points
commented
2026-08-25T19:55:47.6266667+00:00
Jose Benjamin Solis Nolasco
12,036
Reputation points
Volunteer Moderator
3 answers
Internet not working after I connect to Azure VPN (Point to Site)
Hi, We have a Azure VPN set up. The VPN is connected successfully from other machines except cooperate ones. The machines joining company domain were not able to access internet after connected with the Azure VPN. Could you please help me with this…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 30%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJT%3C/text%3E%3C/svg%3E)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 4%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
3 answers
The portal-generated VpnGw1 → VpnGw1AZ upgrade repeatedly fails Microsoft Network preflight validation.
The portal is using API version 2025-07-01, which is a documented supported API version. Please inspect the backend inner validation error for tracking ID b6c6ad21-ec14-42ed-8987-e420c0f8e516 and identify the gateway-specific blocker. We have /24…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-24T13:08:51.18+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 4%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMC%3C/text%3E%3C/svg%3E)
Matt Carson
0
Reputation points
commented
2026-08-24T19:53:39.74+00:00
Jose Benjamin Solis Nolasco
12,036
Reputation points
Volunteer Moderator
3 answers
BGP Site to site VPN learned routes still in table despite the BGP peer down for a week
we see that the learned routes are still available with no BGP peer, this was notices as I wanted to be sure that the BGP filter on the remote end was working , We have a filter on the FortiGate this is working and confirmed by FortiGate support. The…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-18T12:52:39.9666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 66%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBE%3C/text%3E%3C/svg%3E)
Brendan Edward Richardson
0
Reputation points
commented
2026-08-24T08:17:35.2+00:00
Brendan Edward Richardson
0
Reputation points
3 answers
Connection with AWS Vpc
So I have established the connection with AWS VPC using VPN Gateway .It shows the tunnel has been established but when our resources try to communicate with each other it can not be done
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-07-29T09:18:18.9+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 7.000000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Rai Shehroz
0
Reputation points
commented
2026-08-24T05:47:18.7933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 68%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Mythreya Asnala
0
Reputation points Microsoft External Staff
Moderator
1 answer
VpnGw1 to VpnGw1AZ migration repeatedly fails
Existing East US VPN Gateway MTCloudVPN, currently SKU VpnGw1. Standard public IP is already configured and GatewaySubnet is /24. Attempting the supported migration from VpnGw1 to VpnGw1AZ repeatedly fails during deployment/preflight validation. The…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-22T14:40:44.28+00:00
Matt Carson
0
Reputation points
answered
2026-08-22T22:30:36.8533333+00:00
Allan Solomon Mejia
7,915
Reputation points
2 answers
One of the answers was accepted by the question author.
Azure VPN Client for Mobiles - IOS/Andriod
Hi, I want to know if a Azure VPN Client (P2S) will be made for Mobile IOS and Andriod? I know it can be supported for certification authentication but we would really like it to support AD auth. Thanks
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2025-05-21T13:03:44.2533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 55.00000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKY%3C/text%3E%3C/svg%3E)
Kin Yung
21
Reputation points
commented
2026-08-20T17:14:46.1066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 48%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Ross McBain
0
Reputation points
1 answer
Azure VPN Client intermittently fails after update because Credential Manager (VaultSvc) does not start
We have experienced a recurring issue with the Azure VPN Client for Windows across multiple devices. The issue appears to occur shortly after an Azure VPN Client update. When affected, users are unable to connect to the VPN because the Windows Credential…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-18T18:39:24.73+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 92%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECH%3C/text%3E%3C/svg%3E)
Caden Hurst
0
Reputation points
answered
2026-08-19T02:16:06.9033333+00:00
Allan Solomon Mejia
7,915
Reputation points
0 answers
We can't create VNG
Hello, I contact you because we have a subscription (data-test) with Azure Plan for DevTest and we only can create VNG with basic SKU but it's not working and we want to try to create a new one with VpnGw1AZ but with error all time. Have we any…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,174 questions
asked
2026-08-13T07:20:51.04+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 64%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EXC%3C/text%3E%3C/svg%3E)
Xavi Cata Llorach
0
Reputation points
commented
2026-08-16T17:46:59.8866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 71%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Ganesh Patapati
12,170
Reputation points Microsoft External Staff
Moderator