Azure VPN Gateway with SKU VpnGw1 failing migration to another subscription within same tenant.

Question

Hi MS Team,

I'm trying to move VPN Gateway (SKU VpnGw1) with associated Public IP adddress (SKU: Basic) to another Subscription within same Azure tenant.

I am facing an error as per below. (Removed some confidential info)

The error also referencing another Subscription ID that we don't use or have access to from our tenant, which is "8a394325-f0d7-4f3b-ae45-28dd9e85875c"

Please provide a solution asap.

Error:

{"message":"Resource move validation failed. Please see details. Diagnostic information: timestamp '20240612T172733Z', subscription id 'xxxxxsubid', tracking id 'd5ebb694-5749-4ce9-ba90-0e371ddb8a6d', request correlation id '0db1f342-7223-4729-a80e-27a7bdee4758'. (Code: ResourceMoveProviderValidationFailed) Cannot move one or more resources in the request. Please check details for information about each resource. (Code: CannotMoveResource, Target: Microsoft.Network/virtualNetworkGateways) Move for resource /subscriptions/xxxxxsubid/resourceGroups/xxxresourcegroup/providers/Microsoft.Network/publicIPAddresses/vm-vnet01-pubip01 is not supported since it references resource /subscriptions/8a394325-f0d7-4f3b-ae45-28dd9e85875c/resourceGroups/AZUREGATEWAY-4BBD0032-A55C-4548-9CCC-FBD9B8E67141-6A759F91A7BF-MIGRATED/providers/Microsoft.Compute/cloudServices/azuregateway-4bbd0032-a55c-4548-9ccc-fbd9b8e67141-6a759f91a7bf in a different subscription 8a394325-f0d7-4f3b-ae45-28dd9e85875c. (Code: MoveNotSupportedForCrossSubscriptionReferencedResources),

Move for resource /subscriptions/xxxxxsubid/resourceGroups/xxxresourcegroup/providers/Microsoft.Network/virtualNetworks/vm-vnet01 is not supported since it references resource /subscriptions/8a394325-f0d7-4f3b-ae45-28dd9e85875c/resourceGroups/AZUREGATEWAY-4BBD0032-A55C-4548-9CCC-FBD9B8E67141-6A759F91A7BF-MIGRATED/providers/Microsoft.Compute/cloudServices/azuregateway-4bbd0032-a55c-4548-9ccc-fbd9b8e67141-6a759f91a7bf in a different subscription 8a394325-f0d7-4f3b-ae45-28dd9e85875c. (Code: MoveNotSupportedForCrossSubscriptionReferencedResources)","code":"ResourceMoveProviderValidationFailed","name":"e0e244af-0c56-4beb-8eab-8a0c022cc029","status":409}

Answer 1

Hi Mike,

Some notes and quick checks;

• moving a VPN Gateway that is associated with a Standard SKU public IP address to a new subscription is not supported https://luke.geek.nz/azure/Move-Azure-Public-IP-to-another-subscription/
• Additionally, any resource associated with a Standard SKU public IP address cannot be moved across subscriptions (you have referenced in different subscriptions, which is causing the move to fail) https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/networking-move-limitations To work around this limitation, consider creating a new VPN Gateway and public IP address in the target subscription and reconfigure your network accordingly.

Answer 2

@MikeAdmin

Thank you for reaching out.

I understand you are trying to move VPN Gateway (SKU VpnGw1) with associated Public IP address (SKU: Basic) to another Subscription within same Azure tenant.

Currently Virtual Network Gateways cannot be moved across subscription, and it is currently documented here

The solution in this case will be to recreate the VPN Gateway in the new subscription. Although as documented here because Basic SKU public IP addresses are announced to retire September 30, 2025, we're no longer permitting new gateways to be created using Basic SKU public IP addresses. Starting December 1, 2023, when you create a new VPN gateway, you must use a Standard SKU public IP address. This limitation doesn't apply to new gateways that you create using the VPN Gateway Basic gateway SKU. You can still create a Basic SKU VPN gateway that uses a Basic SKU public IP address.

In your case above if you are planning to create a new VPN Gateway (SKU VpnGw1) then you will have to assign a standard SKU public IP address to it.

It will help if you could raise feature request on feedback portal here for VPN Gateway to support move across subscription.

Hope this helps! Please let me know if you have any additional questions. Thank you!