Azure Create VPN GW not found the basic option on SKU

Question

Azure Create VPN GW not found the basic option on SKU

Benny Chan 45

I want to Create virtual network gateway for test. I'm not found the basic option on SKU

Why not found the basic option on SKU Azure Create VPN GW not found the basic option on SKU

GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator

2023-10-05T10:55:52.7966667+00:00

Hello @Benny Chan ,

As mentioned in the Azure VPN gateway FAQ,

Can I create a VPN gateway with the Basic gateway SKU in the portal? No. The Basic SKU is not available in the portal. You can create a Basic SKU VPN gateway using Azure CLI or PowerShell.

So, as mentioned by @TP below, you can use PowerShell to deploy a Basic SKU VPN gateway.

You can refer the below GitHub link in case you face issues with the PowerShell commands.

https://github.com/MicrosoftDocs/azure-docs/issues/114852

Kindly let us know if you need further assistance on this issue.

Please don’t forget to close the thread by clicking "Accept the answer", as this can be beneficial to other community members.
Benny Chan 45 Reputation points

2023-10-06T03:21:31.59+00:00

Hi GitaraniSharma,

I remember that the Basic SKU can available in the portal last month, but need to select VPN type of route-based. I can't found this option now. Is this Azure updated setting?
TP 125.7K Reputation points Volunteer Moderator

2023-10-06T04:45:08.4933333+00:00

@Benny Chan The portal was updated to remove Basic SKU. You have to use PowerShell or CLI if you want to create a Basic SKU VPN Gateway.

The sample code I posted creates Route-Based VPN using -VpnType RouteBased option.
GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator

2023-10-06T12:26:35.2133333+00:00

@Benny Chan , as @TP mentioned the Basic SKU is no longer available in Azure portal. And you have to use PowerShell or CLI if you want to create a Basic SKU VPN Gateway.

This is documented in our FAQ:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq#vpn-basic

Regards,

Gita
GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator

2023-10-09T13:38:49.4533333+00:00

@Benny Chan , Could you please provide an update on this post?

Kindly let us know if the below helps or you need further assistance on this issue.

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Accepted answer

1 additional answer

Your answer

GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator

2023-10-05T10:55:52.7966667+00:00

Hello @Benny Chan ,

As mentioned in the Azure VPN gateway FAQ,

Can I create a VPN gateway with the Basic gateway SKU in the portal? No. The Basic SKU is not available in the portal. You can create a Basic SKU VPN gateway using Azure CLI or PowerShell.

So, as mentioned by @TP below, you can use PowerShell to deploy a Basic SKU VPN gateway.

You can refer the below GitHub link in case you face issues with the PowerShell commands.

https://github.com/MicrosoftDocs/azure-docs/issues/114852

Kindly let us know if you need further assistance on this issue.

Please don’t forget to close the thread by clicking "Accept the answer", as this can be beneficial to other community members.
Benny Chan 45 Reputation points

2023-10-06T03:21:31.59+00:00

Hi GitaraniSharma,

I remember that the Basic SKU can available in the portal last month, but need to select VPN type of route-based. I can't found this option now. Is this Azure updated setting?
TP 125.7K Reputation points Volunteer Moderator

2023-10-06T04:45:08.4933333+00:00

@Benny Chan The portal was updated to remove Basic SKU. You have to use PowerShell or CLI if you want to create a Basic SKU VPN Gateway.

The sample code I posted creates Route-Based VPN using -VpnType RouteBased option.
GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator

2023-10-06T12:26:35.2133333+00:00

@Benny Chan , as @TP mentioned the Basic SKU is no longer available in Azure portal. And you have to use PowerShell or CLI if you want to create a Basic SKU VPN Gateway.

This is documented in our FAQ:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq#vpn-basic

Regards,

Gita
GitaraniSharma-MSFT 50,096 Reputation points Microsoft Employee Moderator

2023-10-09T13:38:49.4533333+00:00

@Benny Chan , Could you please provide an update on this post?

Kindly let us know if the below helps or you need further assistance on this issue.

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Answer 1

TP 125.7K Volunteer Moderator

Hi Benny,

You need to use powershell to deploy Basic SKU VPN Gateway.

Please see sample code below. I tested and was able to successfully create Basic VPN Gateway.

$location = "westus3"
$resourceGroup = "basic-vnet-gateway-group"
$vnetAddressSpace = "10.20.0.0/16"
$gatewaySubnet = "10.20.0.0/27"
New-AzResourceGroup -Name $resourceGroup -Location $location
$subnetConfig = New-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -AddressPrefix $gatewaySubnet
$vngwPIP = New-AzPublicIpAddress -Name myvngw-ip -ResourceGroupName $resourceGroup -Location $location -Sku Basic -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -Name myvngw-vnet -ResourceGroupName $resourceGroup -Location $location -AddressPrefix $vnetAddressSpace -Subnet $subnetConfig
$subnet = Get-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -VirtualNetwork $vnet
$vngwIpConfig = New-AzVirtualNetworkGatewayIpConfig -Name vngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $vngwPIP.Id
New-AzVirtualNetworkGateway -Name myvngw-gw -ResourceGroupName $resourceGroup -Location $location -IpConfigurations $vngwIpConfig -GatewayType Vpn -VpnType RouteBased -GatewaySku Basic

Please click Accept Answer and upvote if above was helpful.

Thanks.

-TP

Benny Chan 45 Reputation points

2023-10-10T07:39:01.5866667+00:00

I try to update the code, but not sure this is correct. I see your sample code for New-AzResourceGroup, if want to add on existing resourceGroup of Dev_Bak, Can I have sample code?

$location = "East Asia"

$resourceGroup = "Dev_Bak"

$vnetAddressSpace = "172.16.16.0/20"

$gatewaySubnet = "172.16.17.40/29"

New-AzResourceGroup -Name $resourceGroup -Location $location

$subnetConfig = New-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -AddressPrefix $gatewaySubnet

$vngwPIP = New-AzPublicIpAddress -Name DebugLabVPN-IP -ResourceGroupName $resourceGroup -Location $location -Sku Basic -AllocationMethod Dynamic

$vnet = New-AzVirtualNetwork -Name DebugLabVPN-VNET -ResourceGroupName $resourceGroup -Location $location -AddressPrefix $vnetAddressSpace -Subnet $subnetConfig

$subnet = Get-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -VirtualNetwork $vnet

$vngwIpConfig = New-AzVirtualNetworkGatewayIpConfig -Name vngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $vngwPIP.Id

New-AzVirtualNetworkGateway -Name DebugLabVPN-GW -ResourceGroupName $resourceGroup -Location $location -IpConfigurations $vngwIpConfig -GatewayType Vpn -VpnType RouteBased -GatewaySku Basic

The design as below
TP 125.7K Reputation points Volunteer Moderator

2023-10-10T09:07:44.7366667+00:00

Hi Benny, if you run the script with the New-AzResourceGroup line there it will just prompt you as to what you want to do (since the group already exists). So you can enter y or n and press enter and it will continue running the script. Or if you want you could remove the New-AzResourceGroup line from the script and it will run okay since the resource group already exists.

Either option will work. Please let me know if the above is unclear.
Benny Chan 45 Reputation points

2023-10-10T09:40:24.61+00:00

Hi TP,

for the CLI $vnet = New-AzVirtualNetwork -Name Prd1Azu-DebugVNet -ResourceGroupName $resourceGroup -Location $location -AddressPrefix $vnetAddressSpace -Subnet $subnetConfig

I enter y to continue running the script, but shown error

PS /home/benny> $vnet = New-AzVirtualNetwork -Name Prd1Azu-DebugVNet -ResourceGroupName $resourceGroup -Location $location -AddressPrefix $vnetAddressSpace -Subnet $subnetConfig

Confirm

Are you sure you want to overwrite resource 'Prd1Azu-DebugVNet'

[Y] Yes [N] No [S] Suspend [?] Help (default is "Y"): Y

New-AzVirtualNetwork: Subnet Prd1Azu-DebugSubTest is in use by /subscriptions/93176ccc-1753-4ea8-92cd-ecace8f650fe/resourceGroups/Prd1Azu-DebugRGOps/providers/Microsoft.Network/networkInterfaces/Prd1Azu-DebugNICLXJS02/ipConfigurations/Prd1Azu-DebugIPCLXJS02 and cannot be deleted. In order to delete the subnet, delete all the resources within the subnet. See aka.ms/deletesubnet.

StatusCode: 400

ReasonPhrase: Bad Request

ErrorCode: InUseSubnetCannotBeDeleted

ErrorMessage: Subnet Prd1Azu-DebugSubTest is in use by /subscriptions/93176ccc-1753-4ea8-92cd-ecace8f650fe/resourceGroups/Prd1Azu-DebugRGOps/providers/Microsoft.Network/networkInterfaces/Prd1Azu-DebugNICLXJS02/ipConfigurations/Prd1Azu-DebugIPCLXJS02 and cannot be deleted. In order to delete the subnet, delete all the resources within the subnet. See aka.ms/deletesubnet.

OperationID : f04c3046-d13f-4bf5-9dea-0cf4f9f85a18

GitaraniSharma-MSFT 50,096 Microsoft Employee Moderator

@Benny Chan , for existing Vnet and subnet, please use the below PowerShell commands:

$vnet = Get-AzVirtualNetwork -Name myvnet -ResourceGroupName myrg1

$subnet = Get-AzVirtualNetworkSubnetConfig -name 'GatewaySubnet' -VirtualNetwork $vnet

$ngwpip = @{
    Name = 'mypip'
    ResourceGroupName = 'myrg1'
    Location = 'uksouth'
    Sku = 'Basic'
    AllocationMethod = 'Dynamic'
    IpAddressVersion = 'IPv4'
}
New-AzPublicIpAddress @ngwpip

$ngwpip = Get-AzPublicIpAddress -Name ngwpip -ResourceGroupName myrg1

$gwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name gwipconfig1 -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName myrg1 -Location "UK South" -IpConfigurations $gwipconfig -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "Basic"

Regards,

Gita

Benny Chan 45 Reputation points

2023-10-11T06:19:57.1666667+00:00

Thanks TP and Gita

Answer 2

Sebastián D. Gauna 40

Why the heck did Microsoft take out the option from the website!!!!!!!!????!?!!!! Just to make us fall into the trap and spend more money I assume. I had created in the website a Basic SKU Virtual Network Gateway in May 2023...

As usual Microsoft doing this annoying things...

Dusten Hale 0 Reputation points

2024-02-15T18:43:27.92+00:00

This is one of the pettiest things I have actually come across in the 20yrs I've been working with MS products. Went to fire up a VPN gateway today and boom can't spend $30 a month now have to spend $140 a month or do it the "hard way" through the CLI ROFL!!!!

Share via

Azure Create VPN GW not found the basic option on SKU

1 additional answer

Your answer