You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/storage/files/storage-files-configure-p2s-vpn-linux.md
+19-19Lines changed: 19 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,10 +1,10 @@
1
1
---
2
-
title: Configure a point-to-site VPN on Linux for Azure Files
3
-
description: Learn how to configure a point-to-site (P2S) virtual private network (VPN) on Linux to mount your Azure file shares directly on premises.
2
+
title: Configure a Point-to-Site VPN on Linux for Azure Files
3
+
description: Learn how to configure a point-to-site virtual private network (VPN) on Linux to mount your Azure file shares directly on premises.
4
4
author: khdownie
5
5
ms.service: azure-file-storage
6
6
ms.topic: how-to
7
-
ms.date: 05/09/2024
7
+
ms.date: 01/14/2026
8
8
ms.author: kendownie
9
9
ms.custom:
10
10
- devx-track-azurecli
@@ -13,9 +13,9 @@ ms.custom:
13
13
# Customer intent: As a Linux system administrator, I want to configure a point-to-site VPN to connect to Azure file shares, so that I can securely access and mount my Azure file shares directly from my on-premises environment.
14
14
---
15
15
16
-
# Configure a point-to-site (P2S) VPN on Linux for use with Azure Files
16
+
# Configure a point-to-site VPN on Linux for use with Azure Files
17
17
18
-
You can use a point-to-site (P2S) virtual private network (VPN) connection to mount your Azure file shares from outside of Azure, without sending data over the open internet. A point-to-site VPN connection is a VPN connection between Azure and an individual client. To use a P2S VPN connection with Azure Files, you need to configure a P2S VPN connection for each client that wants to connect. If you have many clients that need to connect to your Azure file shares from your on-premises network, you can use a site-to-site (S2S) VPN connection instead of a point-to-site connection for each client. To learn more, see [Configure a site-to-site VPN for use with Azure Files](storage-files-configure-s2s-vpn.md).
18
+
You can use a point-to-site virtual private network (VPN) connection to mount your Azure file shares from outside of Azure, without sending data over the open internet. A point-to-site VPN connection is a VPN connection between Azure and an individual client. To use a point-to-site VPN connection with Azure Files, you need to configure a point-to-site VPN connection for each client that wants to connect. If you have many clients that need to connect to your Azure file shares from your on-premises network, you can use a site-to-site VPN connection instead of a point-to-site connection for each client. To learn more, see [Configure a site-to-site VPN for use with Azure Files](storage-files-configure-s2s-vpn.md).
19
19
20
20
We strongly recommend that you read [Azure Files networking overview](storage-files-networking-overview.md) before continuing with this article for a complete discussion of the networking options available for Azure Files.
21
21
@@ -37,7 +37,7 @@ The article details the steps to configure a point-to-site VPN on Linux to mount
37
37
38
38
## Prerequisites
39
39
40
-
- The most recent version of the Azure CLI. For information on how to install the Azure CLI, see [Install the Azure PowerShell CLI](/cli/azure/install-azure-cli) and select your operating system. If you prefer to use the Azure PowerShell module on Linux, you may. However, the instructions below are for Azure CLI.
40
+
- The most recent version of the Azure CLI. For information on how to install the Azure CLI, see [Install the Azure CLI](/cli/azure/install-azure-cli) and select your operating system. If you prefer to use the Azure PowerShell module on Linux, you may. However, the instructions below are for Azure CLI.
41
41
42
42
- An Azure file share you'd like to mount on-premises. Azure file shares are deployed within storage accounts, which are management constructs that represent a shared pool of storage in which you can deploy multiple file shares. You can learn more about how to deploy Azure file shares and storage accounts in [Create an Azure file share](storage-how-to-create-file-share.md).
If the installation fails or you get an error such as **EAP_IDENTITY not supported, sending EAP_NAK**, you might need to install extra plugins:
59
+
If the installation fails or you get an error such as `EAP_IDENTITY not supported, sending EAP_NAK`, you might need to install extra plugins:
60
60
61
61
```bash
62
62
sudo apt install -y libcharon-extra-plugins
63
63
```
64
64
65
65
### Deploy a virtual network
66
66
67
-
To access your Azure file share and other Azure resources from on-premises via a Point-to-Site VPN, you must create a virtual network, or VNet. You can think of the P2S VPN connection create as a bridge between your on-premises Linux machine and this Azure virtual network.
67
+
To access your Azure file share and other Azure resources from on-premises via a point-to-site VPN, you must create a virtual network. You can think of the point-to-site VPN connection as creating a bridge between your on-premises Linux machine and this Azure virtual network.
68
68
69
69
The following script creates an Azure virtual network with three subnets: one for your storage account's service endpoint, one for your storage account's private endpoint, which is required to access the storage account on-premises without creating custom routing for the public IP of the storage account that may change, and one for your virtual network gateway that provides the VPN service.
70
70
71
-
Remember to replace`<region>`, `<resource-group>`, and `<desired-vnet-name>` with the appropriate values for your environment.
71
+
Replace`<region>`, `<resource-group>`, and `<desired-vnet-name>` with the appropriate values for your environment.
72
72
73
73
```bash
74
74
REGION="<region>"
@@ -148,12 +148,12 @@ The Azure virtual network gateway is the service that your on-premises Linux cli
148
148
- A public IP address that identifies the gateway to your clients wherever they are in the world.
149
149
- The root certificate you created earlier that is used to authenticate your clients
150
150
151
-
Remember to replace`<desired-vpn-name-here>` with the name you would like for these resources.
151
+
Replace`<desired-vpn-name-here>` with the name you would like for these resources.
152
152
153
153
> [!NOTE]
154
154
> Deploying the Azure virtual network gateway can take up to 45 minutes. While this resource is being deployed, this bash script blocks the deployment from being completed.
155
155
>
156
-
> P2S IKEv2/OpenVPN connections aren't supported with the **Basic** SKU. This script uses the **VpnGw1** SKU for the virtual network gateway.
156
+
> Point-to-site IKEv2/OpenVPN connections aren't supported with the **Basic** SKU. This script uses the **VpnGw1** SKU for the virtual network gateway.
157
157
158
158
```azurecli
159
159
VPN_NAME="<desired-vpn-name-here>"
@@ -174,7 +174,7 @@ az network vnet-gateway create \
@@ -231,10 +231,10 @@ sudo ipsec up $VIRTUAL_NETWORK_NAME
231
231
232
232
## Mount Azure file share
233
233
234
-
After setting up your Point-to-Site VPN, you can mount your Azure file share. See [Mount SMB file shares to Linux](storage-how-to-use-files-linux.md) or [Mount NFS file share to Linux](storage-files-how-to-mount-nfs-shares.md).
234
+
After setting up your point-to-site VPN, you can mount your Azure file share. See [Mount SMB file shares to Linux](storage-how-to-use-files-linux.md) or [Mount NFS file share to Linux](storage-files-how-to-mount-nfs-shares.md).
0 commit comments