Re-size VPN Gateway BASIC SKU to STANDARD without recreating the VPN Gateway

Question

Hi

Our organization needs to re-size from VPN gateway BASIC SKU to STANDARD SKU.

Can this be done without downtime and without recreating the VPN Gateway?

Regards

Koomar

Answer 1

Azure VPN gateway is in an active-standby configuration. Standby instance would take over automatically in the case of an interruption of 10 to 15 seconds for a planned maintenance

Details are here: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

If you have a Standard SKU, you can resize to a HighPerformance SKU. To resize a gateway for the Resource Manager deployment model using PowerShell, use the following command:

$gw = Get-AzVirtualNetworkGateway -Name vnetgw1 -ResourceGroupName testrg

Resize-AzVirtualNetworkGateway -VirtualNetworkGateway $gw -GatewaySku HighPerformance

You can also resize a gateway in the Azure portal.

---

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

@Koomar Ramessur

Thank you for reaching out to us on the Microsoft Q&A forum.

Based on your question above.

Can this be done without downtime and without recreating the VPN Gateway?

The resizing of VpnGw SKUs is allowed within the same generation, except resizing of the Basic SKU. The Basic SKU is a legacy SKU and has feature limitations. In order to move from Basic to another SKU, you must delete the Basic SKU VPN gateway and create a new gateway with the desired Generation and SKU size combination. So, in order to resize from Basic SKU to Standard SKU you will have delete Basic SKU VPN and create standard SKU VPN. This is currently documented here. Just FYI you can resize between Standard and HighPerformance SKUs.

If it helps, if you want change from an old (legacy) SKU to a new SKU. You will have to delete the existing VPN gateway and create a new VPN gateway. This is currently documented here.

Hope this helps! Please let me know if you have any questions.

---

​​Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 3

Hi

Based on the information provided on my tenant , I see

It looks like you are allowed to change from Basic to Standard and vice-versa. Has this functionality been deprecreted?

Thanks

Koomar

Answer 4

As a follow-up question:

In relation to my previous inquiry, I would like to further inquire whether it is feasible to establish and configure an additional VPN gateway beforehand, with the intention of having multiple VPN gateways.

The rationale behind this is to prepare the replacement VPN gateway in advance, allowing ample time to reconfigure all on-premise connections and to facilitate a smooth transition from the existing BASIC VPN gateway to the new gateway.

Considering my organization's operation as a 24x7 establishment, it is imperative to avoid any downtime.

Kindly provide your insights on this matter.

Sincerely,

Koomar