Hello, I'm trying to create a Basic SKU of a VPN gateway. I know that it needs to be created from the CLI and not from the web portal so I tried to do it but so far have failed. I have created a VPN tunnel using VpnGW1 but it's too expensive for us so I deleted the gateway. All other resources required for the VPN are already there. Any help would be greatly appreciated. Thanks.

How to create Basic Azure VPN Gateway

Accepted answer

TP 83,971

Hi,

Please see sample code below. You can copy/paste it into PowerShell Azure Cloud Shell:

$location = "westus3"
$resourceGroup = "basic-vnet-gateway-group"
$vnetAddressSpace = "10.20.0.0/16"
$gatewaySubnet = "10.20.0.0/27"
New-AzResourceGroup -Name $resourceGroup -Location $location
$subnetConfig = New-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -AddressPrefix $gatewaySubnet
$vngwPIP = New-AzPublicIpAddress -Name myvngw-ip -ResourceGroupName $resourceGroup -Location $location -Sku Basic -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -Name myvngw-vnet -ResourceGroupName $resourceGroup -Location $location -AddressPrefix $vnetAddressSpace -Subnet $subnetConfig
$subnet = Get-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -VirtualNetwork $vnet
$vngwIpConfig = New-AzVirtualNetworkGatewayIpConfig -Name vngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $vngwPIP.Id
New-AzVirtualNetworkGateway -Name myvngw-gw -ResourceGroupName $resourceGroup -Location $location -IpConfigurations $vngwIpConfig -GatewayType Vpn -VpnType RouteBased -GatewaySku Basic

Please click Accept Answer and upvote if above was helpful.

Thanks.

-TP

arslakwij200 20

Thank you. As I said, I have the other resources already deployed. I am using the following code to reference the existing resources but it does not work. Can you help?

$location = "Central US"
$resourceGroup = "my-rg"
$vnet = "my-vent"
$vngwPIP = "my-pub-ip"
$subnet = Get-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -VirtualNetwork $vnet
$vngwIpConfig = New-AzVirtualNetworkGatewayIpConfig -Name vngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $vngwPIP.Id
New-AzVirtualNetworkGateway -Name myvngw-gw -ResourceGroupName $resourceGroup -Location $location -IpConfigurations $vngwIpConfig -GatewayType Vpn -VpnType RouteBased -GatewaySku Basic

TP 83,971 Reputation points

2024-03-15T20:23:10.7833333+00:00

Sure, I can help. Is the public IP address that you are trying to use Basic SKU? It needs to be in order to use it with Basic VPN Gateway.

What is the error message you are seeing?

arslakwij200 20

Public IP is standard SKU. I have tried the following code but it gives an error at $vngwIpConfig.

Error: New-AzVirtualNetworkGatewayIpConfig: Cannot convert 'System.Object[]' to the type 'System.String' required by parameter 'SubnetId'. Specified method is not supported.

Code:

$location = "Central US"
$resourceGroup = "inta-rg"
$subnet = az network vnet subnet list --resource-group inta-rg --vnet-name inta-vnet --query "[?name=='GatewaySubnet']"
$pubip = az network public-ip show -g inta-rg -n inta-vpn-ip
$vngwIpConfig = New-AzVirtualNetworkGatewayIpConfig -Name vngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $pubip.Id
New-AzVirtualNetworkGateway -Name myvngw-gw -ResourceGroupName $resourceGroup -Location $location -IpConfigurations $vngwIpConfig -GatewayType Vpn -VpnType RouteBased -GatewaySku Basic

TP 83,971 Reputation points

2024-03-15T20:44:07.3733333+00:00

Okay, delete the existing Standard SKU Public IP address (unless you need it for something else) and create a new Basic SKU Public IP address. I will fix your code so that it will work and post updated version

TP 83,971

Please test code below (I didn't test it yet).

You need to have Basic SKU Public IP address named "inta-vpn-ip" in the same resource group, so if you already have one with that name as Standard SKU either delete/recreate it as Basic or change variable in script to name of Basic SKU IP.

$location = "centralus"
$resourceGroup = "inta-rg"
$basicPublicIP = "inta-vpn-ip"
$vnetName = "inta-vnet"
$vngwPIP = Get-AzPublicIpAddress -resourceGroupName $resourceGroup -name $basicPublicIP
$vnet = Get-AzVirtualNetwork -Name $vnetName -ResourceGroupName $resourceGroup
$subnet = Get-AzVirtualNetworkSubnetConfig -Name GatewaySubnet -VirtualNetwork $vnet
$vngwIpConfig = New-AzVirtualNetworkGatewayIpConfig -Name vngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $vngwPIP.Id
New-AzVirtualNetworkGateway -Name myvngw-gw -ResourceGroupName $resourceGroup -Location $location -IpConfigurations $vngwIpConfig -GatewayType Vpn -VpnType RouteBased -GatewaySku Basic

arslakwij200 20 Reputation points

2024-03-15T21:15:15.7833333+00:00

It worked. Thank you.

Share via

How to create Basic Azure VPN Gateway

0 additional answers