Provisioning keeps failing on the following Azure VPN Gateway

Question

I am following all the steps from Microsoft's website to set up an Azure VPN Gateway... but every time I provision it, provisioning fails after about 10 minutes. I have tried provisioning via both the GUI and CLI and the deployment fails at the same point each time. I'm paying for Microsoft support, but they would only let me open a ticket here. I hesitate to post any of my configuration here as it could be utilized to gain a better understanding of my internal security practices, but this is the part that relates to the failure without compromising confidential information.

"resourceId": "/subscriptions/REDACTED/resourcegroups/REDACTED/providers/Microsoft.Network/virtualNetworkGateways/REDACTED",

"status": {

    "value": "Failed",

    "localizedValue": "Failed"

},

"subStatus": {

    "value": "",

    "localizedValue": ""

},

"submissionTimestamp": "2026-03-29T22:02:26Z",

"subscriptionId": "REDACTED",

"tenantId": "REDACTED",

"properties": {

    "statusMessage": "{\"status\":\"Failed\",\"error\":{\"code\":\"ResourceOperationFailure\",\"message\":\"The resource operation completed with terminal provisioning state 'Failed'.\",\"details\":[{\"code\":\"OperationFailureErrors\",\"message\":\"The operation failed due to following errors: 'One or more operations failed'.\"}]}}",

    "eventCategory": "Administrative",

    "entity": "/subscriptions/REDACTED/resourcegroups/REDACTED/providers/Microsoft.Network/virtualNetworkGateways/REDACTED",

    "message": "Microsoft.Network/virtualNetworkGateways/write",

    "hierarchy": "REDACTED/REDACTED"

},

"relatedEvents": []

Answer 1

Hello John Rain

I see that your VPN gateway deployment is encountering a general “ResourceOperationFailure” error and is timing out after approximately 10 minutes.

Check the gateway subnet size how much are you giving ensure you have a GatewaySubnet of at least /27. If it’s too small or overlaps another subnet, gateway provisioning will stall.

Occasionally, failed operations can cause the gateway to remain in a “Failed” state, which prevents retries. You can resolve this by running the following PowerShell command:

Get-AzVirtualNetworkGateway -Name "" -ResourceGroupName "" | Set-AzVirtualNetworkGateway

Also, please check the activity logs for the first failed write operation and review the error status and cause.

NSGs or user-defined routes on the gateway subnet may prevent setup. Please remove any custom NSG or UDR from that subnet and attempt the setup again.

Check the below public document for more understanding:

https://learn.microsoft.com/en-us/azure/networking/troubleshoot-failed-state

I have also initiated a private message. Please check it and provide the necessary information so we can discuss further on your concern.

---

I hope the above answer helps you! Please let us know if you have any further questions.

Please don't forget to "upvote" where the information provided will help you, this can be beneficial to other members of the community.