Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,809 questions
Multitenant vpn gateway/hub
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 41%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
mulhollandm
1
Reputation point
folks
is there a way in azure to terminate multiple vpns from different tenants on-premises gateways onto the same azure device/service but which provides tenant separation and therefore allows overlapping up addressing
thanks to anyone taking the time to reply
Azure VPN Gateway
{count} votes
-
GitaraniSharma-MSFT 50,106 Reputation points Microsoft Employee Moderator2022-12-21T09:00:34.37+00:00 Hello @mulhollandm ,
Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.
Could you please provide some more details on your requirement?
Do you want to connect multiple S2S sites with overlapping addresses and the traffic should be isolated as you don't want Branch to Branch connection?
Azure VPN gateway supports NAT (Network Address Translation) to connect on-premises networks or branch offices to an Azure virtual network with overlapping IP addresses.
Refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/nat-overviewRegards,
Gita -
mulhollandm 1 Reputation point
2022-12-21T11:04:24.147+00:00 gita
thanks for your reply, it's greatly appreciated
i'm asking if there is a single service on Azure which multiple tenants can terminate their on-premises VPNs, i.e. a VPN gateway type service but one which i can have different customers use and then, on the back end route that traffic to the different tenant VNets
the service would obviously need to have complete separation of each customers vpn
otherwise it looks like i need a VPN gateway for each individual customer VNet and that could be costly and difficult to manage
thanks again
-
GitaraniSharma-MSFT 50,106 Reputation points Microsoft Employee Moderator
2022-12-27T19:03:13+00:00 Hello @mulhollandm ,
Apologies for the delay in response.
You can create more than one VPN connection from your virtual network gateway, typically connecting to multiple on-premises sites.
Refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/design#s2smulti
https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-multi-site-to-site-resource-manager-portalAnd then use Azure VPN NAT to connect networks with overlapping IP address ranges.
Refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/nat-overview
https://learn.microsoft.com/en-us/azure/vpn-gateway/nat-howtoTo route the traffic to the different tenant VNets, you can enable Vnet peering with gateway transit option.
Refer : https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview#gateways-and-on-premises-connectivityAnd to have complete separation of each customers VPN, you can use Azure VPN gateway without BGP, so that the address spaces are not learned automatically by other peers.
Will the above help?
Regards,
Gita -
GitaraniSharma-MSFT 50,106 Reputation points Microsoft Employee Moderator
2023-01-03T07:48:24.3+00:00 Hello @mulhollandm ,
Could you please provide an update on this post?
Kindly let us know if the above helps or you need further assistance on this issue.
Regards,
Gita -
GitaraniSharma-MSFT 50,106 Reputation points Microsoft Employee Moderator
2023-01-05T12:11:03.647+00:00 Hello @mulhollandm , could you please provide an update on this post and let us know if you have any further questions?
Sign in to comment
Sign in to answer