This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 85%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHK%3C/text%3E%3C/svg%3E)
I have an azure sql server and database on my primary UK South region and also i have a sql failover group in UK West region and both regions connect with vnet peering. My primary region connected with the on prem server with VPN Gateway for the data I/O. Now i want resilency on my infrastructure and if my primary region down, then secondary region automatically becomes the primary region. Can I add a secondary region on my vpn gateway, then switch and connect the on-prem when the primary fails. How can i achive this?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 38%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
You can use any of the solutions described in https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable
If you want the primary/standby on-prem, you'd need to implement automatic routing updates in your on-prem environment
hth
Marcin
Can I use one vpn gateway for this and add secondary's ip on it? or do i need two?
You add the second public IP address to the Azure VPN gateway. Details at https://learn.microsoft.com/en-us/azure/vpn-gateway/active-active-portal
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution.
hth
Marcin