Skip to content

tutorial-create-gateway-portal.md

Latest commit

 

History

History
107 lines (68 loc) · 6.23 KB

tutorial-create-gateway-portal.md

File metadata and controls

107 lines (68 loc) · 6.23 KB
title Tutorial – Create & manage a VPN gateway – Azure portal
titleSuffix Azure VPN Gateway
description In this tutorial, learn how to create and manage an Azure VPN gateway by using the Azure portal.
author cherylmc
ms.author cherylmc
ms.service azure-vpn-gateway
ms.topic tutorial
ms.date 06/24/2025
ms.custom sfi-image-nochange

Tutorial: Create and manage a VPN gateway using the Azure portal

This tutorial helps you create and manage a virtual network gateway (VPN gateway) using the Azure portal. The VPN gateway is one part of the connection architecture that helps you securely access resources within a virtual network using VPN Gateway.

:::image type="content" source="./media/tutorial-create-gateway-portal/gateway-diagram.png" alt-text="Diagram that shows a virtual network and a VPN gateway." lightbox="./media/tutorial-create-gateway-portal/gateway-diagram-expand.png":::

  • The left side of the diagram shows the virtual network and the VPN gateway that you create by using the steps in this article.
  • You can later add different types of connections, as shown on the right side of the diagram. For example, you can create site-to-site and point-to-site connections. To view different design architectures that you can build, see VPN gateway design.
  • For more information about Azure VPN Gateway, see What is Azure VPN Gateway? If you want to learn more about the configuration settings used in this tutorial, see About VPN Gateway configuration settings.

In this tutorial, you learn how to:

[!div class="checklist"]

  • Create a virtual network.
  • Create an active-active mode zone-redundant VPN gateway.
  • View the gateway public IP address.
  • Upgrade a VPN gateway SKU.
  • Reset a VPN gateway.

Note

[!INCLUDE AZ SKU region support note]

Prerequisites

You need an Azure account with an active subscription. If you don't have one, create one for free.

Create a virtual network

This article uses the Azure portal to create a virtual network. You can also use a different tool or method to create a virtual network. For more information or steps, see Create a virtual network. For this exercise, the virtual network doesn't require the configuration of additional services, such as Azure Bastion or DDoS Protection. However, you can add these services if you want to use them.

[!INCLUDE Virtual network values]

[!INCLUDE Create a VNet]

Create a gateway subnet

[!INCLUDE About GatewaySubnet with links]

[!INCLUDE Create gateway subnet]

[!INCLUDE NSG warning]

Create a VPN gateway

In this section, you create the virtual network gateway (VPN gateway) for your virtual network. Creating a gateway can often take 45 minutes or more, depending on the selected gateway SKU. Use the following steps to create a VPN gateway. Note that the VPN Gateway Basic SKU is only available in PowerShell or CLI.

[!INCLUDE Create a vpn gateway] [!INCLUDE Configure PIP settings]

You can see the deployment status on the Overview page for your gateway. Once the gateway is created, you can view the IP address assigned to it by looking at the virtual network in the portal. The gateway appears as a connected device.

View public IP address

To view public IP addresses associated to your virtual network gateway, navigate to your gateway in the portal.

  1. On the Virtual network gateway portal page, under Settings, open the Properties page.
  2. To view more information about the IP address object, click the associated IP address link.

Upgrade a gateway SKU

There are specific rules for upgrading a gateway SKU. Not all SKUs can be upgraded. For more information, see Upgrade a gateway SKU.

  1. Go to the Configuration page for your virtual network gateway.
  2. On the right side of the page, select the dropdown arrow to show a list of available SKUs. Notice that the list only populates SKUs that you're able to select.
  3. Select the SKU from the dropdown list and save your changes.

Reset a gateway

Gateway resets behave differently, depending on your gateway configuration. For more information, see Reset a VPN gateway or a connection.

[!INCLUDE reset a gateway]

Clean up resources

If you're not going to continue to use this application or go to the next tutorial, delete these resources.

  1. Enter the name of your resource group in the Search box at the top of the portal and select it from the search results.
  2. Select Delete resource group.
  3. Enter your resource group for TYPE THE RESOURCE GROUP NAME and select Delete.

Next steps

After you create a VPN gateway, you can configure more gateway settings and connections. The following articles help you create a few of the most common configurations:

[!div class="nextstepaction"] Site-to-site VPN connections

[!div class="nextstepaction"] Point-to-site - Certificate authentication VPN connections

[!div class="nextstepaction"] Point-to-site - Microsoft Entra ID authentication VPN connections