VPN Gateway documentation
Learn how to configure, create, and manage an Azure VPN gateway. Create encrypted cross-premises connections to your virtual network from on-premises locations, or create encrypted connections between VNets.
- VPN Gateway documentation
- Get started
- What is VPN Gateway?
- What's new?
- VPN Gateway FAQ
- Quickstarts & Tutorials
- Create and manage a VPN gateway
- Configure a site-to-site connection
- Configure a point-to-site connection
- Design & architecture
- Design & topology
- Design highly available gateway connections
- Backend connectivity interoperability
- Work remotely
- Gateways and configuration settings
- Create and manage VPN gateways
- Create a VPN gateway
- Manage gateway SKUs
- Migrate classic gateways to Resource Manager
- Active-active gateways
- Zone-redundant gateways
- Delete a VPN gateway
- Verify a gateway connection
- Reset a connection or a gateway
- Configure customer-controlled gateway maintenance
- Site-to-site S2S VPN connections
- Configure site-to-site connections - preshared key
- Configure site-to-site connections - certificate
- Connect AWS and Azure using a BGP-enabled VPN gateway
- Site-to-site with ExpressRoute connections
- Coexisting connections
- VPN over private peering
- Add or remove a site-to-site connection
- Forced tunneling
- Configure custom IPsec/IKE connection policies
- Modify a local network gateway
- VPN devices
- Point-to-site P2S VPN connections
- About point-to-site VPN
- About point-to-site VPN routing
- Configure P2S - certificate authentication
- P2S gateway configuration
- VPN client configuration
- Windows clients
- Native VPN client
- Azure VPN client
- OpenVPN client
- Linux clients
- macOS and iOS clients
- Windows clients
- Generate self-signed certificates
- .cer and .pfx files
- .pem files
- Install VPN client certificates
- Configure P2S - Microsoft Entra ID authentication
- P2S gateway configuration
- VPN client configuration
- Configure P2S - RADIUS authentication
- P2S gateway configuration
- Configure Always On tunnels
- Move to OpenVPN or IKEv2 from SSTP
- P2S session management
- Advertise custom routes to P2S clients
- Create custom IPsec policies for P2S
- Azure VPN Client versions, checks & settings
- Intune - Deploy VPN client profile
- VNet-to-VNet VPN connections
- Configure VNet-to-VNet VPN connections
- Configure a VNet-to-VNet connection between deployment models
- Configure custom IPsec/IKE connection policies
- Security
- Routing
- Forced tunneling
- Gateway transit for VNet peering
- BGP
- About BGP and VPN Gateway
- Configure BGP for a VPN gateway
- Connect AWS and Azure using a BGP-enabled VPN gateway
- NAT
- Point-to-site routing
- Monitoring
- Troubleshooting
- Troubleshoot VPN Gateway
- Troubleshoot using diagnostic logs
- Troubleshoot point-to-site connection issues
- Troubleshoot site-to-site connection issues
- Validate VPN throughput to a VNet
- Community-suggested VPN or firewall device settings
- Reference
- Resources