Virtual network gateway Sku specified is not valid for gateway

Question

I would like to create a Basic (SKU) VPN gateway. The gateway is for 1 to 2 people that would need to connect using P2S for general Administration purposes. I originally used SKU VpnGw1 not realizing that it came with a price tag of $130 bucks a month.

When I try to create the VPN through PS I get the following error.

"InvalidGatewaySkuSpecifiedForGatewayDeploymentType"

I have tried multiple scripts and multiple IP's.

az network vnet-gateway create -n "vpn-basic-001" -l "westus3" --public-ip-address "pip-vpnGateway-001" -g "rg-001" --vnet "vnet-001" --vpn-gateway-generation Generation1 --gateway-type Vpn --sku Basic --vpn-type RouteBased

I tried creating a PolicyBased vpn gateway and received the following error.

"VmssVpnGatewayPublicIpsMustHaveZonesConfigured"

Any help would be appreciated.

Thanks!

Answer 1

Hi,

Please see sample code below. I tested and was able to successfully create Basic VPN Gateway in West US 3.

$location = "westus3"
$resourceGroup = "basic-vnet-gateway-group"
$vnetAddressSpace = "10.20.0.0/16"
$gatewaySubnet = "10.20.0.0/27"
New-AzResourceGroup -Name $resourceGroup -Location $location
$subnetConfig = New-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -AddressPrefix $gatewaySubnet
$vngwPIP = New-AzPublicIpAddress -Name myvngw-ip -ResourceGroupName $resourceGroup -Location $location -Sku Basic -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -Name myvngw-vnet -ResourceGroupName $resourceGroup -Location $location -AddressPrefix $vnetAddressSpace -Subnet $subnetConfig
$subnet = Get-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -VirtualNetwork $vnet
$vngwIpConfig = New-AzVirtualNetworkGatewayIpConfig -Name vngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $vngwPIP.Id
New-AzVirtualNetworkGateway -Name myvngw-gw -ResourceGroupName $resourceGroup -Location $location -IpConfigurations $vngwIpConfig -GatewayType Vpn -VpnType RouteBased -GatewaySku Basic

Please click Accept Answer if above was helpful.

Thanks.

-TP

Answer 2

Hi, tsstrong.

Something to note:

The P2S isn't supported on a basic SKU, at least the OpenVPN IKEv2/OpenVPN connection, which it the most common supported P2S VPN connection type:

Reference: Gateway SKUs by tunnel, connection, and throughput

Reference: Transition to OpenVPN protocol or IKEv2 from SSTP

PolicyBased VPNs can only be used on the Basic gateway SKU. This VPN type is not compatible with other gateway SKUs.
Refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings#vpntype