你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站,请访问 https://docs.azure.cn

New-AzVirtualNetworkGateway

创建虚拟网络网关

语法

New-AzVirtualNetworkGateway
   -Name <String>
   -ResourceGroupName <String>
   -Location <String>
   [-IpConfigurations <PSVirtualNetworkGatewayIpConfiguration[]>]
   [-GatewayType <String>]
   [-ExtendedLocation <String>]
   [-VNetExtendedLocationResourceId <String>]
   [-VpnType <String>]
   [-EnableBgp <Boolean>]
   [-DisableIPsecProtection <Boolean>]
   [-EnableActiveActiveFeature]
   [-EnablePrivateIpAddress]
   [-GatewaySku <String>]
   [-GatewayDefaultSite <PSLocalNetworkGateway>]
   [-MinScaleUnit <Int32>]
   [-MaxScaleUnit <Int32>]
   [-VpnClientAddressPool <String[]>]
   [-VpnClientProtocol <String[]>]
   [-VpnAuthenticationType <String[]>]
   [-VpnClientRootCertificates <PSVpnClientRootCertificate[]>]
   [-VpnClientRevokedCertificates <PSVpnClientRevokedCertificate[]>]
   [-VpnClientIpsecPolicy <PSIpsecPolicy[]>]
   [-Asn <UInt32>]
   [-PeerWeight <Int32>]
   [-IpConfigurationBgpPeeringAddresses <PSIpConfigurationBgpPeeringAddress[]>]
   [-NatRule <PSVirtualNetworkGatewayNatRule[]>]
   [-EnableBgpRouteTranslationForNat]
   [-Tag <Hashtable>]
   [-Force]
   [-RadiusServerAddress <String>]
   [-RadiusServerSecret <SecureString>]
   [-RadiusServerList <PSRadiusServer[]>]
   [-AadTenantUri <String>]
   [-AadAudienceId <String>]
   [-AadIssuerUri <String>]
   [-CustomRoute <String[]>]
   [-VpnGatewayGeneration <String>]
   [-VirtualNetworkGatewayPolicyGroup <PSVirtualNetworkGatewayPolicyGroup[]>]
   [-ClientConnectionConfiguration <PSClientConnectionConfiguration[]>]
   [-AdminState <String>]
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

说明

虚拟网络网关是表示 Azure 中网关的对象。 New-AzVirtualNetworkGateway cmdlet 基于名称、资源组名称、位置和 IP 配置以及网关类型和 VPN(如果为 VPN)在 Azure 中创建网关的对象。 还可以命名网关 SKU。 如果此网关用于点到站点连接,则还需要包括 VPN 客户端地址池,从中分配用于连接客户端的地址以及用于对连接到网关的 VPN 客户端进行身份验证的 VPN 客户端根证书。 还可以选择包括其他功能,例如 BGP 和 Active-Active。

示例

示例 1:创建虚拟网络网关

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "Basic" -CustomRoute 192.168.0.0/24

上述操作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网,并在 Azure 中创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”,位置为“UK West”,其以前创建的 IP 配置保存在变量“ngwIPConfig”中,网关类型为“VPN”,VPN 类型为“RouteBased”,SKU 为“Basic”。

示例 2:使用外部 Radius 配置创建虚拟网络网关

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id
$Secure_String_Pwd = ConvertTo-SecureString "TestRadiusServerPassword" -AsPlainText -Force

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "Basic" -RadiusServerAddress "TestRadiusServer" -RadiusServerSecret $Secure_String_Pwd -CustomRoute 192.168.0.0/24

上述操作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网,并在 Azure 中创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”,位置为“UK West”,其以前创建的 IP 配置保存在变量“ngwIPConfig”中,网关类型为“VPN”,VPN 类型为“RouteBased”,SKU 为“Basic”。它还添加地址为“TestRadiusServer”的外部半径服务器。 它还会在网关上设置客户指定的自定义路由。

示例 3:使用 P2S 设置创建虚拟网络网关

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id
$rootCert = New-AzVpnClientRootCertificate -Name $clientRootCertName -PublicCertData $samplePublicCertData
$vpnclientipsecpolicy = New-AzVpnClientIpsecPolicy -IpsecEncryption AES256 -IpsecIntegrity SHA256 -SALifeTime 86471 -SADataSize 429496 -IkeEncryption AES256 -IkeIntegrity SHA384 -DhGroup DHGroup2 -PfsGroup PFS2

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw1" -VpnClientProtocol IkeV2 -VpnClientAddressPool 201.169.0.0/16 -VpnClientRootCertificates $rootCert -VpnClientIpsecPolicy $vpnclientipsecpolicy -CustomRoute 192.168.0.0/24

上述操作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网,并使用 P2S 设置(例如 VpnProtocol、VpnClientAddressPool、VpnClientRootCertificates、VpnClientIpsecPolicy 等)创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”,位置为“UK West”,其以前创建的 IP 配置保存在变量“ngwIPConfig”中,网关类型为“VPN”,VPN 类型为“RouteBased”,SKU 为“VpnGw1”。Vpn 设置将在网关上设置,例如 VpnProtocol 设置为 Ikev2、VpnClientAddressPool 为“201.169.0.0/16”,VpnClientRootCertificate 设置为传递的一个:clientRootCertName 和自定义 vpn ipsec 策略在 object:$vpnclientipsecpolicy
它还会在网关上设置客户指定的自定义路由。

示例 4:使用虚拟网络网关 VpnClient 的 AAD 身份验证配置创建虚拟网络网关。

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id
$Secure_String_Pwd = ConvertTo-SecureString "TestRadiusServerPassword" -AsPlainText -Force

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw1" -VpnClientProtocol OpenVPN   -VpnClientAddressPool 201.169.0.0/16 -AadTenantUri "https://login.microsoftonline.com/0ab2c4f4-81e6-44cc-a0b2-b3a47a1443f4" -AadIssuerUri "https://sts.windows.net/0ab2c4f4-81e6-44cc-a0b2-b3a47a1443f4/" -AadAudienceId "a21fce82-76af-45e6-8583-a08cb3b956f9"

上述操作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网,并在 Azure 中创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”,位置为“UK West”,其以前创建的 IP 配置保存在变量“ngwIPConfig”中,网关类型为“VPN”,VPN 类型为“RouteBased”,SKU 为“Basic”。它还配置 AAD 身份验证配置:虚拟网络网关 VpnClient 的 AadTenantUri、AadIssuerUri 和 AadAudienceId。

示例 5:使用 VpnGatewayGeneration 创建虚拟网络网关

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw4" -VpnGatewayGeneration "Generation2"

上述操作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网,并在 Azure 中创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”,其位置为“UK West”,其以前创建的 IP 配置保存在变量“ngwIPConfig”中,网关类型为“VPN”,VPN 类型为“RouteBased”,SKU“VpnGw4”和 VpnGatewayGeneration Generation2 已启用。

示例 6:使用 IpConfigurationBgpPeeringAddresses 创建虚拟网络网关

New-AzResourceGroup -Location "UK West" -Name "resourcegroup1"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "resourcegroup1" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "resourcegroup1" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ipconfig1 -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

$ipconfigurationId1 = $ngwipconfig.Id
$addresslist1 = @('169.254.21.10')
$gw1ipconfBgp1 = New-AzIpConfigurationBgpPeeringAddressObject -IpConfigurationId $ipconfigurationId1 -CustomAddress $addresslist1

New-AzVirtualNetworkGateway -Name gateway1 -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig -IpConfigurationBgpPeeringAddresses $gw1ipconfBgp1 -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw4" -VpnGatewayGeneration "Generation2"

上述操作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网,并在 Azure 中创建虚拟网络网关。 网关 ipconfigurationId1 刚刚创建并存储在 ngwipconfig 中。 网关将在资源组“resourcegroup1resourcegroup1”内名为“gateway1”,该位置为“UK West”,其以前创建的 IP 配置 Bgppeering 地址保存在变量“gw1ipconfBgp1”中,网关类型为“VPN”,VPN 类型为“RouteBased”,SKU“VpnGw4”和 VpnGatewayGeneration Generation Generation2 已启用。

示例 7:使用 NatRules 创建虚拟网络网关

New-AzResourceGroup -Location "UK West" -Name "resourcegroup1"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "resourcegroup1" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "resourcegroup1" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ipconfig1 -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

$natRule = New-AzVirtualNetworkGatewayNatRule -Name "natRule1" -Type "Static" -Mode "IngressSnat" -InternalMapping @("25.0.0.0/16") -ExternalMapping @("30.0.0.0/16")

New-AzVirtualNetworkGateway -Name gateway1 -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw4" -VpnGatewayGeneration "Generation2" -NatRule $natRule -EnableBgpRouteTranslationForNat

上述操作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网,并在 Azure 中创建虚拟网络网关。 网关 ipconfigurationId1 刚刚创建并存储在 ngwipconfig 中。 网关将在资源组“resourcegroup1resourcegroup1”中名为“gateway1”,位于“UK West”新 virtualNetworkGateway NatRule 的位置中,将保存在变量“natRule”中,网关类型为“VPN”,vpn 类型为“RouteBased”,SKU“VpnGw4”和 VpnGatewayGeneration Generation2 已启用,并且已启用 BgpRouteTranslationForNat。

参数

-AadAudienceId

P2S AAD 身份验证选项:AadAudienceId。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AadIssuerUri

P2S AAD 身份验证选项:AadIssuerUri。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AadTenantUri

P2S AAD 身份验证选项:AadTenantUri。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AsJob

在后台运行 cmdlet

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-Asn

用于通过 VPN 进行 BGP 的虚拟网络网关的 ASN

Type:UInt32
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-ClientConnectionConfiguration

在地址和策略组之间分配的 P2S 客户端连接配置

Type:PSClientConnectionConfiguration[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Confirm

提示你在运行 cmdlet 之前进行确认。

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CustomRoute

客户指定的自定义路由 AddressPool

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-DefaultProfile

用于与 Azure 通信的凭据、帐户、租户和订阅。

Type:IAzureContextContainer
Aliases:AzContext, AzureRmContext, AzureCredential
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DisableIPsecProtection

标志在 VirtualNetworkGateway 上禁用 IPsec 保护。

Type:Boolean
Position:Named
Default value:False
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-EnableActiveActiveFeature

在虚拟网络网关上启用活动活动功能的标志

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EnableBgp

EnableBgp 标志

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-EnableBgpRouteTranslationForNat

用于在此 VirtualNetworkGateway 上启用 BgpRouteTranslationForNat 的标志。

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EnablePrivateIpAddress

在虚拟网络网关上启用专用 IPAddress 的标志

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ExtendedLocation

此虚拟网络网关的扩展位置

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Force

如果想要覆盖资源,请不要要求确认

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-GatewayDefaultSite

GatewayDefaultSite

Type:PSLocalNetworkGateway
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-GatewaySku

网关 SKU 层

Type:String
Accepted values:Basic, Standard, HighPerformance, UltraPerformance, VpnGw1, VpnGw2, VpnGw3, VpnGw4, VpnGw5, VpnGw1AZ, VpnGw2AZ, VpnGw3AZ, VpnGw4AZ, VpnGw5AZ, ErGw1AZ, ErGw2AZ, ErGw3AZ
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-GatewayType

此虚拟网络网关的类型:Vpn、ExpressRoute

Type:String
Accepted values:Vpn, ExpressRoute, LocalGateway
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-IpConfigurationBgpPeeringAddresses

虚拟网络网关 bgpsettings 的 BgpPeeringAddresses。

Type:PSIpConfigurationBgpPeeringAddress[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-IpConfigurations

虚拟网络网关的 IpConfigurations。

Type:PSVirtualNetworkGatewayIpConfiguration[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-Location

位置。

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-Name

资源名称。

Type:String
Aliases:ResourceName
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-NatRule

虚拟网络网关的 NatRules。

Type:PSVirtualNetworkGatewayNatRule[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-PeerWeight

添加到通过此虚拟网络网关通过 BGP 学习的路由的权重

Type:Int32
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-RadiusServerAddress

P2S 外部 Radius 服务器地址。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-RadiusServerList

P2S 多个外部 Radius 服务器服务器。

Type:PSRadiusServer[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-RadiusServerSecret

P2S 外部 Radius 服务器机密。

Type:SecureString
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-ResourceGroupName

资源组名称。

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-Tag

表示资源标记的哈希表。

Type:Hashtable
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VirtualNetworkGatewayPolicyGroup

添加到此网关的 P2S 策略组

Type:PSVirtualNetworkGatewayPolicyGroup[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VNetExtendedLocationResourceId

虚拟网络网关的 VNetExtendedLocationResourceId。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VpnAuthenticationType

P2S VPN 客户端身份验证类型的列表。

Type:String[]
Accepted values:Certificate, Radius, AAD
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VpnClientAddressPool

P2S VpnClient AddressPool

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VpnClientIpsecPolicy

P2S VPN 客户端隧道协议的 IPSec 策略列表。

Type:PSIpsecPolicy[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VpnClientProtocol

P2S VPN 客户端隧道协议列表

Type:String[]
Accepted values:SSTP, IkeV2, OpenVPN
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VpnClientRevokedCertificates

要吊销的 VpnClientCertificates 列表。

Type:PSVpnClientRevokedCertificate[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VpnClientRootCertificates

要添加的 VpnClientRootCertificates 列表。

Type:PSVpnClientRootCertificate[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-VpnGatewayGeneration

此 VirtualNetwork VPN 网关的生成。 如果 GatewayType 不是 VPN,则必须为 None。

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-VpnType

Vpn:PolicyBased/RouteBased 的类型

Type:String
Accepted values:PolicyBased, RouteBased
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-WhatIf

显示运行该 cmdlet 时会发生什么情况。 cmdlet 未运行。

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

输入

String

PSVirtualNetworkGatewayIpConfiguration[]

Boolean

PSLocalNetworkGateway

String[]

PSVpnClientRootCertificate[]

PSVpnClientRevokedCertificate[]

PSIpsecPolicy[]

UInt32

Int32

PSIpConfigurationBgpPeeringAddress[]

PSVirtualNetworkGatewayNatRule[]

Hashtable

SecureString

PSRadiusServer[]

输出

PSVirtualNetworkGateway