Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
3 answers
VPN Gateway Connection is Unknown
I try to add another site to site using azure vpn gateway and my fortigate. But in this new vpn gateway the connection always in state 'unknown' and from my fortigate i can see timeout. I do packet sniffer to the new vpn gateway and found there is no…
Azure VPN Gateway
asked
2026-09-18T00:00:45.2666667+00:00
Handian Sudianto
7,471
Reputation points
commented
2026-09-19T04:21:01.3833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 50%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESC%3C/text%3E%3C/svg%3E)
SHOUMIK CHAKRAVARTY
660
Reputation points
2 answers
Tracking Cost of Data Transfer on VPN Gateway
Hello, If we have conenction from onprem to the azure thru site to site conenction then we only pay for data come out from azure to the onprem and data in from onprem to the azure is not billable? How we can know how much data in and data out every day?
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-09-18T11:44:32.8233333+00:00
Handian Sudianto
7,471
Reputation points
answered
2026-09-18T17:20:23.0933333+00:00
Andreas Baumgarten
132.9K
Reputation points MVP
Volunteer Moderator
0 answers
Is RADIUS/EAP-TLS supported for native Windows Always On VPN Device Tunnel before user sign-in?
Hello, I would like to confirm whether native Windows Always On VPN Device Tunnel can use RADIUS/NPS with certificate-based authentication through Azure VPN Gateway. My requirement is specifically automatic connectivity before any interactive user…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-09-16T09:16:44.8666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 75%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMK%3C/text%3E%3C/svg%3E)
Maciej Kurzeja
100
Reputation points
3 answers
BGP Site to site VPN learned routes still in table despite the BGP peer down for a week
we see that the learned routes are still available with no BGP peer, this was notices as I wanted to be sure that the BGP filter on the remote end was working , We have a filter on the FortiGate this is working and confirmed by FortiGate support. The…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-08-18T12:52:39.9666667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 66%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBE%3C/text%3E%3C/svg%3E)
Brendan Edward Richardson
0
Reputation points
commented
2026-09-16T05:34:22.14+00:00
Brendan Edward Richardson
0
Reputation points
1 answer
VPN Gateway: Unable to Delete or Recreate It After Going Down
Problem description I am experiencing an issue with my Azure VPN Gateway. It went down starting on September 14, 2026, around 10:00 AM Mountain Time, causing a loss of production connectivity. I attempted to delete and recreate the gateway, but it is…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-09-14T20:36:11.63+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 56.00000000000001%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC2%3C/text%3E%3C/svg%3E)
ChrisGraham-2510
5
Reputation points
answered
2026-09-15T07:15:38.7933333+00:00
Alex Burlachenko
25,285
Reputation points MVP
Volunteer Moderator
1 answer
One of the answers was accepted by the question author.
VPN Client Connection Failures on Windows 11 Since This Morning — Authentication Policy Error
Problem description I am experiencing an issue where all my Windows 11 Point-to-Site VPN clients using IKEv2 and certificate authentication cannot connect to the Azure VPN Gateway since this morning. The error message indicates a policy mismatch during…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 95%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIC%3C/text%3E%3C/svg%3E)
0 answers
Cisco 8000V router for VPN with expressroute
I have a setup with ExpressRoute + Site to Site VPN connecting on-premises and Azure. I want to use Cisco's virtual router C8000v for VPN instead of VPN network Gateway. Need to make this change to have advanced routing features. Anyone have implemented…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
Azure ExpressRoute
Azure ExpressRoute
An Azure service that provides private connections between Azure datacenters and infrastructure, either on premises or in a colocation environment.
515 questions
asked
2023-10-18T10:56:11.98+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 39%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMB%3C/text%3E%3C/svg%3E)
Mateen Baig
71
Reputation points
1 answer
Azure VPN (basic) P2S won't connect using IKEv2
I have an Azure VPN (Basic SKU) that has been working fine using SSTP for Point-to-site connections. I tried following the steps in migrate your VPN gateway (Option 1) to migrate to IKEv2. However, the new VPN client never connects - it just sits at…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 28.000000000000004%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
0 answers
P2S VPN (OpenVPN + Entra ID auth) TLS handshake times out after ClientHello — server-side packet capture shows zero packets reach the tenant gateway worker
Summary Point-to-Site VPN connections to a newly provisioned Azure VPN Gateway (OpenVPN protocol, Microsoft Entra ID authentication) consistently fail during the TLS/control-channel handshake, ~14-23 seconds after the client sends its ClientHello.…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-09-07T08:39:27.0766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 12%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
MAHMOUD Araby
0
Reputation points
asked
2026-09-07T08:39:27.0766667+00:00
MAHMOUD Araby
0
Reputation points
1 answer
VpnGw1AZ gateway creation fails repeatedly with InternalServerError (empty error details)
I'm trying to create/recreate a route-based VPN Gateway (SKU: VpnGw1AZ, Generation2) in North Central US, and every deployment attempt fails with a generic InternalServerError and no further diagnostic detail. Environment: Subscription type: MCPP…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-08-18T10:29:39.9866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 36%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Admin Saxena
0
Reputation points
edited an answer
2026-09-02T16:45:26.3233333+00:00
GitaraniSharma-MSFT
50,287
Reputation points Microsoft Employee
Moderator
1 answer
Azure VM cannot communicate with the on-premises server
We are experiencing an issue with a Site-to-Site IPsec VPN between a FortiGate firewall and an Azure Virtual Network Gateway. Environment Azure Region: East US VPN Gateway SKU: VpnGw1AZ (Route-based) Azure VNet: 10.0.1.0/24 Azure VM: Ubuntu 22.04…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-08-04T13:15:13.1+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 93%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERR%3C/text%3E%3C/svg%3E)
Riyas Razik
0
Reputation points
commented
2026-09-02T15:46:50.06+00:00
Allan Solomon Mejia
8,840
Reputation points
1 answer
Unable to delete a orphaned VPN gateway
I have a VPN gateway which is failed state since it doesn't have any virtual hub attached with it. ubuntu@ip-172-31-19-1:~$ az network vpn-gateway show \ -g QA_Aug \ -n mcn-vpngw-sc-qcrn9z-japaneast \ --query…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-09-02T07:38:45.6866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 96%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELV%3C/text%3E%3C/svg%3E)
Lokesh V
0
Reputation points
answered
2026-09-02T07:52:42.39+00:00
Abdul Waqas
345
Reputation points
1 answer
Unable to Migrate the VPN Public IP from basic to Standard due to Subnet Limiataion
We are currently facing a challenge while migrating an Azure VPN Gateway that uses a Basic Public IP, as Basic Public IPs are being retired. The existing VPN Gateway is deployed in a spoke VNet and uses a GatewaySubnet that is only /29 in size. Due to…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-06-17T18:32:12.5766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 49%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Abrar Adil S
476
Reputation points
commented
2026-09-02T07:22:48.52+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 30%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBK%3C/text%3E%3C/svg%3E)
Bhavani Kamidi
5
Reputation points Microsoft External Staff
2 answers
VPN Gateway
Will my VpnGw1 be automatically updated to VpnGw1AZ if I do nothing. It is a /27 network and is already using a standard IP.
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-08-31T15:13:31.9766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 76%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESJ%3C/text%3E%3C/svg%3E)
Schulz, James
10
Reputation points
answered
2026-08-31T15:36:36.72+00:00
TP
163.2K
Reputation points
Volunteer Moderator
4 answers
Meraki MX IPsec VPN Health Check is failing because its return traffic is being blocked in azure (port 80)
I have an IPsec VPN tunnel using a Meraki MX and an Azure virtual network gateway (Basic SKU). The tunnel is good. I'm trying to use a Meraki load balancing feature called "Multi-Uplink IPsec VPN", but the Meraki Health Check is failing…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-08-21T18:44:25.8633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 19%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
Steve G
0
Reputation points
commented
2026-08-26T16:44:21.2+00:00
Allan Solomon Mejia
8,840
Reputation points
2 answers
Azure VPN Gateway P2S User Groups separate address pool does not work with Machine Certificate (CertificateGroupId)
Hello, I am testing Azure VPN Gateway Point-to-Site VPN with multiple address pools using P2S User Groups and vngClientConnectionConfigurations. My goal is to separate IP address pools for User Tunnel and Device Tunnel on the same VPN Gateway. Current…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-08-25T13:36:53.97+00:00
Maciej Kurzeja
100
Reputation points
answered
2026-08-26T07:20:54.2+00:00
Maciej Kurzeja
100
Reputation points
2 answers
How to upgrade VPN Gateway non-AZ SKUs to an VPN Gateway AZ SKUs.
Greetings, Received the following notification from Microsoft regarding my Azure VPN gateway: You’re receiving this notification because you are associated with one or more Azure subscriptions that use Azure VPN Gateway. For reference, you can find this…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-08-25T13:12:10.5533333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 52%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
Jorge Villon, Jr
5
Reputation points
commented
2026-08-25T19:55:47.6266667+00:00
Jose Benjamin Solis Nolasco
12,281
Reputation points
Volunteer Moderator
3 answers
Internet not working after I connect to Azure VPN (Point to Site)
Hi, We have a Azure VPN set up. The VPN is connected successfully from other machines except cooperate ones. The machines joining company domain were not able to access internet after connected with the Azure VPN. Could you please help me with this…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 30%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJT%3C/text%3E%3C/svg%3E)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 4%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
3 answers
The portal-generated VpnGw1 → VpnGw1AZ upgrade repeatedly fails Microsoft Network preflight validation.
The portal is using API version 2025-07-01, which is a documented supported API version. Please inspect the backend inner validation error for tracking ID b6c6ad21-ec14-42ed-8987-e420c0f8e516 and identify the gateway-specific blocker. We have /24…
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-08-24T13:08:51.18+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 4%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMC%3C/text%3E%3C/svg%3E)
Matt Carson
0
Reputation points
commented
2026-08-24T19:53:39.74+00:00
Jose Benjamin Solis Nolasco
12,281
Reputation points
Volunteer Moderator
3 answers
Connection with AWS Vpc
So I have established the connection with AWS VPC using VPN Gateway .It shows the tunnel has been established but when our resources try to communicate with each other it can not be done
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
2,177 questions
asked
2026-07-29T09:18:18.9+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 7.000000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Rai Shehroz
0
Reputation points
commented
2026-08-24T05:47:18.7933333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 68%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Mythreya Asnala
0
Reputation points Microsoft External Staff
Moderator