Terraform VPN VNG - configure custom Default Azure BGP peer IP address

Question

Terraform VPN VNG - configure custom Default Azure BGP peer IP address

Mihai Tănăsescu 26

Hi everyone,

I am banging my head against the wall trying to configure a VPN VNG in Terraform with a custom:
"Default Azure BGP peer IP address"

I get a feeling that this field is read-only and that only the APIPA is editable.
Am I correct or is there something I am missing out on?

Thanks.

Accepted answer

0 additional answers

Your answer

Answer 1

Luis Rodriguez 6,226 Microsoft Employee

Hello @Mihai Tănăsescu

Welcome to Microsoft Q&A Platform,

The default Azure BGP peer IP address is assigned automatically unless you want to use APIPA addresses:

By default, Azure assigns a private IP address from the GatewaySubnet prefix range automatically as the Azure BGP IP address on the Azure VPN gateway. The custom Azure APIPA BGP address is needed when your on premises VPN devices use an APIPA address (169.254.0.1 to 169.254.255.254) as the BGP IP

For reference:
https://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto

Thread related:
https://learn.microsoft.com/en-us/answers/questions/509571/azure-vpn-2-bgp-peers-in-gateway-subnet-why.html

I hope this helps!

----------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Mihai Tănăsescu 26 Reputation points

2022-06-23T08:05:23.77+00:00

Hi @Luis Rodriguez ,

Was afraid of that:) let me shift a bit the topic.
Is there any way that I can control a bit what IPs get automatically allocated from the Gateway subnet?

I would like to have IP1, pause, pause, IP2 if that makes any sense.
I know I cannot start any VM or something in the gateway subnet just to reserve some IPs and trigger the allocation of IP2 to be a bit further apart from IP1 so ..just curious if my idea is a dead-end street.

Thanks!
GitaraniSharma-MSFT 50,021 Reputation points Microsoft Employee Moderator

2022-06-27T13:02:55.69+00:00

Hello @Mihai Tănăsescu ,

No, there is no way to control what IPs get allocated from the Gateway subnet.
The IP addresses in the gateway subnet are allocated to the gateway VMs and gateway services automatically by the platform. And yes, you cannot deploy anything else in the GatewaySubnet.

Regards,
Gita

Share via

Terraform VPN VNG - configure custom Default Azure BGP peer IP address

0 additional answers

Your answer