Action required: Upgrade from Basic to Standard SKU public IP addresses in Azure by 30 September 2025

joon 21

You're receiving this notice because you've used Basic SKU public IP addresses within the last 30 days.

On 30 September 2025, Basic SKU public IP addresses will be retired in Azure. You can continue to use your existing Basic SKU public IP addresses until then, however, you'll no longer be able to create new ones after 31 March 2025.

Standard SKU public IP addresses offer significant improvements, including:

Access to a variety of other Azure products, including Standard Load Balancer, Azure Firewall, and NAT Gateway.Security by default—closed to inbound flows unless allowed by a network security group.Zone-redundant and zonal front ends for inbound and outbound traffic.

If you have any Basic SKU public IP addresses deployed in Azure Cloud Services (extended support), those deployments will not be affected by this retirement and you don't need to take any action for them.

-------

I received an email with this information.

If it is not changed by 25 years, will the IP become unusable?

Or will the basic sku's IP no longer be supported by azure?

이런내용의 안내메일을 받았습니다.

25년까지 변경하지 않을시에 해당 IP는 사용할 수 없게 되는것입니까?

아니면 basic sku의 IP의 azure에서의 지원을 더이상 받게 될수 없는것인가요?

Jaime A 1 Reputation point

2022-09-28T11:37:50.857+00:00

Hello,

I also received the mail.
I tried to upgrade but it says that the IP is assosiated to a resource.
Im using the IP in production. I guess I have to desasign the IP from the resource, upgrade and asign again. Right?
How long does it take?

Best regards,
Calway 31 Reputation points

2022-09-28T11:59:06.153+00:00

Since it will be retied in about 3 years I would not change anything at this time. This was an advanced notification only.

Especially as you noticed you first have to remove the IP from any service you are currently using it for. Which is a very unfriendly upgrade path.

Also, as mentioned in the docs and by @KapilAnanth-MSFT upgrades IP's still don't have availability zones.

If you have more time, and are able to inform partners of a change you could create a new IP and at an ideal time swap them out.

I have also not found how long it takes but if other changes are an indication it might take some time.
Peter Saverino 16 Reputation points

2022-09-28T16:52:06.34+00:00
@KapilAnanth-MSFT

I'm not able to upgrade basic SKU due to the following message:

Can't upgrade at this time
Your public IP is currently associated or has dynamic allocation method. Please make sure that public IP is disassociated and has static allocation method before trying again.

Basic SKU is attached to Virtual network gateway

VPN gateway doesn't support changing the public IP address after creation.

Cannot upgrade basic SKU

Will VPN Gateway stop working after September 30 2025?

If you have any Basic SKU public IP addresses deployed in Azure Cloud Services (extended support), those deployments will not be affected by this retirement and you don't need to take any action for them.

is VPN Gateway included with Azure Cloud Services (extended support) ?
KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-09-29T13:38:37.487+00:00

Hi @Peter Saverino ,

Currently, there are no announcements with respect to basic VPN gateway.
I shall check internally and update this thread.

If the VPN gateway is of classic deployment (Basic SKU is different), then it is included in Azure Cloud Services (extended support).

Thanks,
Kapil
Peter Saverino 16 Reputation points

2022-10-05T14:15:18.597+00:00

Hi @KapilAnanth-MSFT

Were you able to check internally regarding basic VPN gateway?

Also, I'm not able to determine if the VPN Gateway is classic deployment.

How can we identify if the VPN Gateway is Classic deployment.

Thank you for your message.
KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-10-06T07:29:46.987+00:00
Hi @Peter Saverino ,

To determine if the VPN gateway is of Classic or ARM deployment,

Check the resource ID of the VNet to which the gateway is attached.

Check if it is of "Microsoft.Network" or "Microsoft.ClassicNetwork" Resource Provider

Wrt gateway upgrade,

There are no work items or action plans as of now.

One can always recreate the gateway with a higher SKU that supports standard SKU

However, since we have around 3 years for deprecation, I would suggest users to wait until there's an official announcement for VPN gateways using Basic SKU

Cheers,
Kapil
Peter Saverino 16 Reputation points

2022-10-06T20:21:27.987+00:00

Hi Kapil, I have checked the resource type for the Virtual Network, IP Address, Virtual Network Gateway in our tenant and are all listed with type Microsoft.Network.

publicIPAddresses
"type": "Microsoft.Network/publicIPAddresses"

virtualNetworkGateways
"type": "Microsoft.Network/virtualNetworkGateways"

virtualNetworks
type": "Microsoft.Network/virtualNetworks"

From your response it is my understanding Microsoft.Network is included in Azure Cloud Services (extended support). Therefore, we are not impacted by this change.

Is this correct?
 Thank you in advance.
KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-10-07T04:53:02.48+00:00
Hi @Peter Saverino ,

The Azure Cloud Services (extended support) is for classic resources only.
i.e, Microsoft.ClassicNetwork.

You will be impacted by this update.

As of now, the best way to migrate to standard IP is to delete and recreate the gateway with a standard SKU IP.

However, since we have another 3 years, I would suggest you wait for future announcements on VPN gateway using IP Address with basic SKU

Cheers,
Kapil
Peter Saverino 16 Reputation points

2022-10-07T13:48:32.233+00:00

Hi Kapil,
Do you have a timeline when a official announcement will come about "VPN gateway using IP Address with basic SKU" ? Will it arrive by email?

thank you for your comments
KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-10-10T02:37:22.393+00:00

Hi @Peter Saverino ,

As of now, we do not have an ETA on this.

Users will be definitely notified by email.
You can also keep an eye on Azure updates for announcements and service deprecation.

Thanks,
Kapil
Koomar Ramessur 0 Reputation points

2023-03-24T03:51:23.5333333+00:00

Hi

Our organization need to re-size from VPN gateway BASIC SKU to STANDARD SKU.

Can this be done without downtime?

Regards

Koomar
KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2023-03-24T05:59:44.14+00:00

Koomar Ramessur ,

In order to move from Basic to another SKU, you must delete the Basic SKU VPN gateway and create a new gateway with the desired Generation and SKU size combination

You will be required to have a downtime and recreate the connections.

Refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings#benchmark

Cheers,

Kapil
Dan Kyaw 0 Reputation points

2023-08-01T02:19:56.78+00:00

I have a scenario where Virtual Network Gateway was created with Basic IP and it is linked to Express Route. Obviously disassociation of IP to resource will cause huge downtime to the whole network. Is there any other easier way?
KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2023-08-01T04:43:49.6033333+00:00

Dan Kyaw ,

I am afraid we do not have any other work around.

You must delete and recreate the Virtual Network Gateway with a Standard Public IP.

However, I would suggest you to wait until there's an official announcement for Virtual network gateways using Basic IP SKU

Cheers,

Kapil

Accepted answer

KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-09-28T05:16:23.563+00:00

Hi @joon ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you would like to know more about the Basic IP SKU retirement timeline.

This is to notify that users will not be able to use basic SKU IP addresses after 30 September 2025.
And yes, if not upgraded to Standard SKU, these IP Addresses will become unusable and will no longer be supported.

You can continue to use your existing Basic IP address till the above date.
However, you will not be able to create new basic IP addresses after 31 March 2025

You can upgrade your existing basic IP address to standard by following : Upgrade a public IP (if you do not want the IP to change)

I hope this clarifies, please let us know if you require more details on this.

Cheers,
Kapil.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Please sign in to rate this answer.

2 people found this answer helpful.
Brian Manthos 1 Reputation point

2022-09-28T07:30:35.077+00:00

@KapilAnanth-MSFT
The mail has a link titled "pricing" but it doesn't give a quick comparison of the price structure of the "being retired" SKU vs. the least expensive available replacement. Can you provide a link to that comparison?

Ken 1 Reputation point

2022-09-28T07:58:50.933+00:00

Hi Kapil,

Can I keep the existing public IP address remains unchanged when upgrading the SKU from Basic to Standard? Thanks

Ken

Calway 31 Reputation points

2022-09-28T08:05:11.573+00:00

Isn't this what is meant here (see picture below). So a 41% price increase with 'significant improvements' that -- at least -- I don't really need.

More important upgrading does not add zone redundancy (so it's not the same as createing a fresh new Standard SKU IP address) and cannot be performed while the IP address is attached to a service. So my NAT gateway will have downtime (ie not use this IP for outbound traffic during the upgrade). O...and you are required to have a NSG now if you use it for inbound traffic, which I don't

At least they notify you 3 years in advance

KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-09-28T08:59:19.213+00:00

Hi @Ken ,

Yes, IP address will not change when you upgrade from Basic to Standard SKU.

A point to note here is Public IPs upgraded from basic to standard SKU will continue to have no availability zones.

Cheers,
Kapil

bonah koo 6 Reputation points

2022-10-05T04:42:45.927+00:00

hello, we also have an issue about virtual network gateway for expressroute.

At the time we created virtual network gateway, we had to associate Public IP basic sku. And now, before 31 March 2025, we have to upgrade to Standard Public IP.

But As you can see here, Public IP should be disassociated from Virtual Network Gateway, and this is unavailable right now.

I think Azure must provide the guides to change Basic Public IP associated to Virtual Network Gateway to Standard Public IP.

I hope I can get the guides or the comments.

Thanks,
Bonah Koo

KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-10-06T07:32:47.113+00:00

Hi @bonah koo ,

Currently, there are no announcements with respect to dependent resources.

However, since we have around 3 years for deprecation, I would suggest users to wait until there's an official announcement for VPN gateways using Basic IP SKU.

Cheers,
Kapil

nobyk 0 Reputation points

2024-02-08T06:03:56.81+00:00

An update has been announced: Standard and High-Performance VPN Gateway SKUs will be retired on 30 September 2025

Recommended action: Post December 2024, you will be able to upgrade your Standard/High-Performance gateway SKU to one of the other VPN Gateway SKUs available.

If you do not upgrade your gateway by August 2025, your gateway will be automatically upgraded to VPNGw1AZ (Standard) or VPNGw2AZ (High-Performance) after 30 September 2025.
Sign in to comment

Action required: Upgrade from Basic to Standard SKU public IP addresses in Azure by 30 September 2025

0 additional answers