Azure VPN Gateway with SKU VpnGw1 failing migration to another subscription within same tenant.

Michael Palmares 0 Reputation points
2024-06-12T19:21:32.5966667+00:00

Hi MS Team,

I'm trying to move VPN Gateway (SKU VpnGw1) with associated Public IP adddress (SKU: Basic) to another Subscription within same Azure tenant.

I am facing an error as per below. (Removed some confidential info)

The error also referencing another Subscription ID that we don't use or have access to from our tenant, which is "8a394325-f0d7-4f3b-ae45-28dd9e85875c"

Please provide a solution asap.

Error:

{"message":"Resource move validation failed. Please see details. Diagnostic information: timestamp '20240612T172733Z', subscription id 'xxxxxsubid', tracking id 'd5ebb694-5749-4ce9-ba90-0e371ddb8a6d', request correlation id '0db1f342-7223-4729-a80e-27a7bdee4758'. (Code: ResourceMoveProviderValidationFailed) Cannot move one or more resources in the request. Please check details for information about each resource. (Code: CannotMoveResource, Target: Microsoft.Network/virtualNetworkGateways) Move for resource /subscriptions/xxxxxsubid/resourceGroups/xxxresourcegroup/providers/Microsoft.Network/publicIPAddresses/vm-vnet01-pubip01 is not supported since it references resource /subscriptions/8a394325-f0d7-4f3b-ae45-28dd9e85875c/resourceGroups/AZUREGATEWAY-4BBD0032-A55C-4548-9CCC-FBD9B8E67141-6A759F91A7BF-MIGRATED/providers/Microsoft.Compute/cloudServices/azuregateway-4bbd0032-a55c-4548-9ccc-fbd9b8e67141-6a759f91a7bf in a different subscription 8a394325-f0d7-4f3b-ae45-28dd9e85875c. (Code: MoveNotSupportedForCrossSubscriptionReferencedResources),

Move for resource /subscriptions/xxxxxsubid/resourceGroups/xxxresourcegroup/providers/Microsoft.Network/virtualNetworks/vm-vnet01 is not supported since it references resource /subscriptions/8a394325-f0d7-4f3b-ae45-28dd9e85875c/resourceGroups/AZUREGATEWAY-4BBD0032-A55C-4548-9CCC-FBD9B8E67141-6A759F91A7BF-MIGRATED/providers/Microsoft.Compute/cloudServices/azuregateway-4bbd0032-a55c-4548-9ccc-fbd9b8e67141-6a759f91a7bf in a different subscription 8a394325-f0d7-4f3b-ae45-28dd9e85875c. (Code: MoveNotSupportedForCrossSubscriptionReferencedResources)","code":"ResourceMoveProviderValidationFailed","name":"e0e244af-0c56-4beb-8eab-8a0c022cc029","status":409}

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,446 questions
Azure Resource Mover
Azure Resource Mover
An Azure service used for moving multiple resources between Azure regions.
224 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Miguel Gonçalves | AVANADE 961 Reputation points
    2024-06-12T19:55:28+00:00

    Hi Mike,

    Some notes and quick checks;


  2. ChaitanyaNaykodi-MSFT 24,481 Reputation points Microsoft Employee
    2024-06-12T22:13:01.23+00:00

    @MikeAdmin

    Thank you for reaching out.

    I understand you are trying to move VPN Gateway (SKU VpnGw1) with associated Public IP address (SKU: Basic) to another Subscription within same Azure tenant.

    Currently Virtual Network Gateways cannot be moved across subscription, and it is currently documented here

    User's image

    The solution in this case will be to recreate the VPN Gateway in the new subscription. Although as documented here because Basic SKU public IP addresses are announced to retire September 30, 2025, we're no longer permitting new gateways to be created using Basic SKU public IP addresses. Starting December 1, 2023, when you create a new VPN gateway, you must use a Standard SKU public IP address. This limitation doesn't apply to new gateways that you create using the VPN Gateway Basic gateway SKU. You can still create a Basic SKU VPN gateway that uses a Basic SKU public IP address.

    In your case above if you are planning to create a new VPN Gateway (SKU VpnGw1) then you will have to assign a standard SKU public IP address to it.

    It will help if you could raise feature request on feedback portal here for VPN Gateway to support move across subscription.

    Hope this helps! Please let me know if you have any additional questions. Thank you!