IPv6 blocks creation of vpn gateway

Question

IPv6 blocks creation of vpn gateway

Mateusz U 61

According to https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/ipv6-overview VPN gateway should be able to deploy on dual-stacked vnets:

VPN gateways currently support IPv4 traffic only, but they still CAN be deployed in a Dual-stacked VNET

But when trying to create such VPN (tried selecting every SKU/Generation) I get and error:

Why is that? Are the docs wrong or again am I missing some aspect?
Based on the docs expected result for me is that vpn should be created but restricted only to creating VPN connections with ipv4 namespace.

Accepted answer

0 additional answers

Your answer

Answer 1

ChaitanyaNaykodi-MSFT 27,476 Microsoft Employee Moderator

Hello @Mateusz U ,

Thank you for reaching out. I was able to reproduce this issue on my end via Azure portal.

I was able to deploy the VPN Gateway using Azure PowerShell instead. I am sharing this feedback with the portal team, and I will also work on adding a note to the documentation you shared above.

I followed this documentation here to deploy VPN Gateway using Azure PowerShell. Also please take into consideration that creating a gateway can often take 45 minutes or more, depending on the selected gateway SKU.

My Dual Stack Virtual Network

Deployed VPN Gateway

Deployment succeeded

Hope this helps! Please let me know if you have any additional concerns. Thank you!

Mateusz U 61 Reputation points

2022-09-17T15:06:19+00:00

@ChaitanyaNaykodi-MSFT do you maybe know why this solution is not working on existing VirtualNetwork ? I have a network with two subnets and a virtual machine with ipv4 inside ?

I get error:

New-AzVirtualNetworkGateway: Long running operation failed with status 'Failed'. Additional Info:'Cannot apply Resourse Navigation links or service association links on vnet /subscriptions/<guid>/resourceGroups/Pluralsight/providers/Microsoft.Network/virtualNetworks/NetworkB since vnet has ipv6 addresses.'

My setup is (tried both options when VM has ipv6 interface and also when it does not):
Mateusz U 61 Reputation points

2022-09-17T15:57:02.203+00:00

Btw I stripped NetworkB to bare bones and after removing Ipv6 namesapce it allowed me to create VPN (from Powershell). Afterwards adding Ipv6 is failing with error: "Failed to save address space changes to virtual network 'NetworkB'. Error: Cannot add IPv6 addreses on vnet NetworkB since vnet has service association links.".
Mateusz U 61 Reputation points

2022-09-17T16:56:06.69+00:00

I found the difference, Basic vpn does not support ipv6 but VpnGw1 supports. That took a while to find out, I'm gonna make a request to update the docs.
Mateusz U 61 Reputation points

2022-09-17T17:00:02.38+00:00

Reproduction (works after changing Basic to VpnGw1):

New-AzResourceGroup -Name TestRG4 -Location NorthEurope

$virtualNetwork = New-AzVirtualNetwork -ResourceGroupName TestRG4
-Location NorthEurope -Name NetworkTest4
-AddressPrefix 10.1.0.0/16,fd01::/16

Add-AzVirtualNetworkSubnetConfig -Name SubnetB1
-AddressPrefix 10.1.0.0/24,fd01::/64 `
-VirtualNetwork $virtualNetwork

Add-AzVirtualNetworkSubnetConfig -Name SubnetB2
-AddressPrefix 10.1.1.0/24,fd01:1::/64 `
-VirtualNetwork $virtualNetwork

$virtualNetwork | Set-AzVirtualNetwork

$vnet = Get-AzVirtualNetwork -ResourceGroupName TestRG4 -Name NetworkTest4

Add-AzVirtualNetworkSubnetConfig -Name 'GatewaySubnet' -AddressPrefix 10.1.2.0/24 -VirtualNetwork $vnet

$vnet | Set-AzVirtualNetwork

$gwpip= New-AzPublicIpAddress -Name NetworkTest4GWIP -ResourceGroupName TestRG4 -Location 'northeurope' -AllocationMethod Dynamic

$vnet = Get-AzVirtualNetwork -Name NetworkTest4 -ResourceGroupName TestRG4
$subnet = Get-AzVirtualNetworkSubnetConfig -Name 'GatewaySubnet' -VirtualNetwork $vnet
$gwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name gwipconfig1 -SubnetId $subnet.Id -PublicIpAddressId $gwpip.Id

New-AzVirtualNetworkGateway -Name NetworkTest4Vpn -ResourceGroupName TestRG4 \-Location 'northeurope' -IpConfigurations $gwipconfig -GatewayType Vpn
-VpnType RouteBased -GatewaySku Basic
ChaitanyaNaykodi-MSFT 27,476 Reputation points Microsoft Employee Moderator

2022-09-19T15:49:07.48+00:00

Hello @Mateusz U , Glad you were able to resolve the issue and thank you for submitting the doc request it will definitely help a lot.
Tim Bertulies 0 Reputation points

2023-11-08T08:36:11.07+00:00

Though reported a year ago, this issue still exists

Share via

IPv6 blocks creation of vpn gateway

0 additional answers

Your answer