Azure P2S VPN users

Jose Cintron 0

Do I need a virtual wan to be able to configure user groups and IP address pools for P2S VPN users or can I use IP address pools and P2S user groups with just a regular VPN gateway?

hossein jalilian 4,615 Reputation points

2024-06-17T22:48:29.0466667+00:00

Thanks for posting your question in the Microsoft Q&A forum.

With a VPN gateway, you can configure an IP address pool from which IP addresses are allocated to P2S VPN clients when they connect. This allows you to control the IP address space used by the P2S VPN clients.

You can also create user groups and assign users to those groups for P2S VPN access with a VPN gateway. This allows you to control which users can connect to your VPN and what permissions they have

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful
KapilAnanth-MSFT 38,291 Reputation points Microsoft Employee

2024-06-18T14:31:11.5833333+00:00

@Jose Cintron ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I see UJTyagi-MSFT has answered your queries. As mentioned, user groups and IP address pools are only available with Azure vWAN P2S Gateways.

Kindly let us know if we can be of any further assistance here.

Thanks,

Kapil

Please Accept an answer if correct.

Original posters help the community find answers faster by identifying the correct answer.
Jose Cintron 0 Reputation points

2024-06-18T21:13:54.72+00:00

Ok, thanks for the response. We have a current infrastructure with Servers, a few peered vnets, a virtual network gateway that that has a S2S connection to our on prem data center, and some vpn connected users. How difficult and impactful will it be to switchover to a virtual WAN? Can it be integrated to our existing infrastructure? Can we just utilized the virtual WAN vpn group abilities and have it connected to our current setup. We eventually plan on moving our on Prem Data Center to Azure but maintain a S2S connection to the office and P2S connections for all of your users. Not all of the users will have the same level of access, hence why we are exploring the group functionality. I would appreciate any thoughts and advice on the best way of achieving this. Thanks!

Accepted answer

UJTyagi-MSFT 155 Reputation points Microsoft Employee

2024-06-18T10:30:55.88+00:00

Hi Jose Cintron

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Yes, To configure user groups and IP address pools for each group for point-to-site (P2S) VPN users, you need to have Azure Virtual WAN. A regular VPN gateway does not support the configuration of user groups and IP address pools for P2S VPN users. You may refer the prerequisites on the below page.

https://learn.microsoft.com/en-us/Azure/virtual-wan/user-groups-create#prerequisites

The Above page also explains the configuration steps.

Kindly let me know if you have any further queries related to the topic.

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful

Regards

Ujjawal Tyagi
Please sign in to rate this answer.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Sign in to comment

Share via

Azure P2S VPN users

0 additional answers