az network vnet-gateway vpn-client

Download a VPN client configuration required to connect to Azure via point-to-site.

Commands

Name	Description	Type	Status
az network vnet-gateway vpn-client generate	Generate VPN client configuration.	Core	GA
az network vnet-gateway vpn-client ipsec-policy	Manage the VPN client connection ipsec-policy for P2S client connection of the virtual network gateway.	Core	GA
az network vnet-gateway vpn-client ipsec-policy set	Set the VPN client connection ipsec policy per P2S client connection of the virtual network gateway.	Core	Preview
az network vnet-gateway vpn-client ipsec-policy show	Get the VPN client connection ipsec policy per P2S client connection of the virtual network gateway.	Core	Preview
az network vnet-gateway vpn-client ipsec-policy wait	Place the CLI in a waiting state until a condition is met.	Core	GA
az network vnet-gateway vpn-client show-health	Get the VPN client connection health detail per P2S client connection of the virtual network gateway.	Core	Preview
az network vnet-gateway vpn-client show-url	Retrieve a pre-generated VPN client configuration.	Core	GA

az network vnet-gateway vpn-client generate

Edit

Generate VPN client configuration.

The command outputs a URL to a zip file for the generated VPN client configuration.

az network vnet-gateway vpn-client generate [--authentication-method {EAPMSCHAPv2, EAPTLS}]
                                            [--client-root-certificates]
                                            [--ids]
                                            [--name]
                                            [--processor-architecture {Amd64, X86}]
                                            [--radius-server-auth-certificate]
                                            [--resource-group]
                                            [--subscription]
                                            [--use-legacy {false, true}]

Examples

Create the VPN client configuration for RADIUS with EAP-MSCHAV2 authentication.

az network vnet-gateway vpn-client generate -g MyResourceGroup -n MyVnetGateway --authentication-method EAPMSCHAPv2

Create the VPN client configuration for AMD64 architecture.

az network vnet-gateway vpn-client generate -g MyResourceGroup -n MyVnetGateway --processor-architecture Amd64

Generate VPN client configuration. (autogenerated)

az network vnet-gateway vpn-client generate --name MyVnetGateway --processor-architecture Amd64 --resource-group MyResourceGroup --subscription MySubscription

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--authentication-method

Method used to authenticate with the generated client.

Property	Value
Accepted values:	EAPMSCHAPv2, EAPTLS

--client-root-certificates

Space-separated list of client root certificate public certificate data in Base-64 format. Optional for external Radius-based auth with EAPTLS.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

Property	Value
Parameter group:	Resource Id Arguments

--name -n

Name of the VNet gateway.

Property	Value
Parameter group:	Resource Id Arguments

--processor-architecture

Processor architecture of the target system.

Property	Value
Accepted values:	Amd64, X86

--radius-server-auth-certificate

Public certificate data for the Radius server auth certificate in Base-64 format. Required only if external Radius auth has been configured with EAPTLS auth.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Property	Value
Parameter group:	Resource Id Arguments

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Property	Value
Parameter group:	Resource Id Arguments

--use-legacy

Generate VPN client package using legacy implementation.

Property	Value
Default value:	False
Accepted values:	false, true

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False