unable to create basic sku vpn

Todd Stevens 5

We are unable to create a vpn with a basic sku

Sina Salam 3,801 Reputation points

2023-09-22T23:00:14.6066667+00:00
Hello @Todd Stevens ,

Welcome to Microsoft Q&A and thank you for posting your question here.

You are unable to create basic sku vpn and you would like to know how to do this.

Here's a step-by-step guide to create a basic Site-to-Site VPN (SKU VPN) in Microsoft Azure:

Sign in to Azure Portal.

Create a Virtual Network Gateway.

Create a Local Network Gateway.

Create a Connection.

Configure Your On-Premises VPN Device.

Verify and Test the Connection.

Monitor and Troubleshoot (if needed).

If you can follow the above steps, you will have a successful configurations.

Meanwhile, step number 2, is where you need to provide SKU information:

a. In the Azure portal, click on "Create a resource." b. Search for "Virtual network gateway" and select it. c. Click "Create" and fill in the required information, such as the gateway name, region, and SKU. For a basic SKU VPN, you can choose the "VpnGw1" or "VpnGw2" SKU. d. Configure the virtual network settings and public IP address settings as needed. e. Click "Review + create" to review your settings and then click "Create" to provision the virtual network gateway.

NOTE: Step b and c. above as it shown in the image below.

After the above, continue from step 3 till 7.

I hope this is helpful! You can vote for this answer if you found it useful.

PS: Do not hesitate to let me know if you have any other questions.

Best Regards,

Sina Salam
ChaitanyaNaykodi-MSFT 23,031 Reputation points Microsoft Employee

2023-09-25T18:20:05.47+00:00

@Todd Stevens

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Brian Ronald 5 Reputation points

2023-10-06T04:15:39.6+00:00

Hello Team,

We are trying to create a VPN in Basic SKU but the SKU is not available, could you let us know if the basic tier is not available or is it a technical glitch?
Sina Salam 3,801 Reputation points

2023-10-11T00:48:41.3333333+00:00

Hi @Brian Ronald

Sorry for all the inconveniences you are passing through at this time, were you able to review my answer step by steps, and also use @ChaitanyaNaykodi-MSFT answer's too?

There are minimum of two ways to get anything done in computing either GUI or CLI, try CLI if GUI is not working.

Hope to see you smiling. Have a good success.

BR,

Sina

1 answer

ChaitanyaNaykodi-MSFT 23,031 Reputation points Microsoft Employee

2023-09-23T03:47:41.0366667+00:00
@Todd Stevens

Thank you for reaching out.

I understand you are unable to deploy a Basic VPN SKU.

The Basic SKU VPN can only be configured using PowerShell or Azure CLI.

In general, we have seen customer face such issues when they try to assign a Standard(static) SKU public IP address to a Basic VPN gateway. As Basic VPN only supports standard Basic SKU Public IP address(dynamic).

I was successfully able to deploy a Basic SKU VPN using following PowerShell commands.

$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27' $ngwpip = New-AzPublicIpAddress -Name ngwpip1 -ResourceGroupName "<RGName>" -Location "UK West" -AllocationMethod Dynamic -sku Basic $vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "<RGName>" -Subnet $subnet $subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet $ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName <RGName> -Location "UK West" -IpConfigurations $ngwIpConfig -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "Basic" -CustomRoute 192.168.0.0/24

You can use Azure Cloud Shell to run the commands above.

Hope this helps! Please let me know if you have any additional questions or if you are still facing the issue. Thank you!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

5 people found this answer helpful.
Derek_Read 0 Reputation points

2023-11-21T00:07:48.4933333+00:00

@ChaitanyaNaykodi-MSFT Would it be possible to get a diagram of the working solution so that I can see where the various part relate to as I need to do the same thing for my site to site but I need to marry up different pieces of the puzzle to suite my environment

Reiff Lorenz 131 Reputation points

2023-12-14T21:50:02.9733333+00:00

This worked for me. I already had created the IP address and subnet, so I changed the 'new-' to 'get-' and deleted everything else on the line except the name of the resource. Thank you!

Rafale Feliz 0 Reputation points

2024-01-18T13:37:57.9766667+00:00

Hi there, i have a customer who needs a VPN GW basic and I won't be able to deploy this workload on East US2, do you know any additional config required?
Sign in to comment