Azure point-to-site VPN assign static IP

秋山 泉 1 Reputation point

I'm connecting a single server at Site 1 with my Azure virtual network ( via a Point-To-Site VPN connection (

The problem is that each time the connection drops and is re-dialed, the client's IP changes. I need to connect to the single server from a server on my Azure network with the same IP.

Please note that in 80% of use cases site to site is not applicable because it requires a static ip address,
an open port and a dnat on both sites, and I cannot order to all my customer to provide an ip and so on.

It seems that 'Finally, in azure vpn official documentation, Microsoft says that point to site can be used as a site to site alternative where you do not have public ip on customer side.'

What is current situation.
Is this already supported? or would be supported or still not supported?

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,515 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Andriy Bilous 10,731 Reputation points MVP

    Hello @秋山 泉

    There is no simple solution to solve your problem, as unfortunately assigning static IP addresses to VPN clients with P2S VPN isn't currently supported.

    Please see similar question.

    However there is a complex solution, that could help you to achieve your goal - "connect to the single onpremise server from a server on my Azure network with the same IP"

    • Create a private DNS zone on Azure and point it to your Azure virtual network with VM
    • Create Task Scheduler on onpremise server( Running interval every 6 hours) to run a Powershell script that will Get VPN IP address and register A DNS name in Azure Private DNS New-AzPrivateDnsRecordSet -Name computer1 -RecordType A -ZoneName -ResourceGroupName MyAzureResourceGroup -Ttl 3600 -PrivateDnsRecords (New-AzPrivateDnsRecordConfig -IPv4Address "Local VPN IP address"
    • Azure VM will connect to on-premise computer using DNS name
    2 people found this answer helpful.