VPN Type for VPN Gateway

Question

Is VPN Type retired ? I could not see that option any more.
All the VPNs are route-based by default ?

thanks !!

Answer 1

Hello Gongya Yu,

Thanks for reaching out in the Microsoft Q&A!

The "VPN Type" setting in Azure VPN Gateway has not been retired but has been integrated into the gateway SKU selection. Policy-based gateways are available under the Basic SKU and support only IKEv1, while route-based gateways, available under all other SKUs, support both IKEv1 and IKEv2 (with IKEv2 recommended for better security). If you no longer see the "VPN Type" option, it means your VPN Gateway is configured as route-based by default. For legacy devices requiring IKEv1, you can configure a route-based gateway to use IKEv1, but upgrading to IKEv2 is advisable for enhanced security. For more details, refer to the Azure VPN Gateway FAQ here and specifics on IKEv1 and IKEv2 here.

If you find this helpful, please accept this answer to close the thread. Thanks!

Answer 2

Hi @Gongya Yu , I understand you asked about Policy-Based VPN Gateway.

As of Oct 1, 2023, you can't create a policy-based VPN gateway through Azure portal. All new VPN gateways will automatically be created as route-based. If you already have a policy-based gateway, you don't need to upgrade your gateway to route-based. You can use Powershell/CLI to create the policy-based gateways. However, please note that there are limitations with Basic VPN Gateway.

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.