An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
Hi ,
Thanks for reaching out to Microsoft Q&A.
If your Azure VPN gateway is stuck in standby and all onprem routers fail to connect, the issue is almost certainly on the Azure side or its configuration, not the routers. “Standby” typically indicates the gateway is provisioned but not actively handling connections (common in active-standby setups or during backend issues). Resetting alone will not fix misconfigurations.
Check the basics first: confirm the gateway is in Succeeded provisioning state, verify the Public IP has not changed, ensure connection status is “Connected/Not Connected” (not Unknown), and validate shared keys, IKE/IPsec policies, and BGP settings (if used) match exactly across all sites. Also review NSG/UDR conflicts, route propagation, and SKU limitations (Basic/legacy gateways are unstable for multisite). If everything looks correct, this could be a backend fault redeploying the gateway (or moving to a newer SKU like VpnGw1+) is often the fastest resolution. Two key questions: is the connection status showing “Unknown” or “Not Connected” in azure, and did the gateway Public IP or SKU change recently?
Please 'Upvote'(Thumbs-up) and 'Accept' as answer if the reply was helpful. This will be benefitting other community members who face the same issue.