Azure VPN Gateway
Azure VPN Gateway is a service that uses a specific type of virtual network gateway to send encrypted traffic between an Azure virtual network and on-premises locations over the public Internet.
Deployments
27
Made by
Massdriver
Official
Yes
No
Compliance
Clouds
Tags
azure-vpn-gateway
VPN Profile
To start using the VPN after it’s deployed, download the VPN profile. You can download the profile from the Azure Console or using PowerShell.
Azure Console
In the Azure portal, go to the virtual network gateway for the virtual network to which you want to connect.
On the virtual network gateway page, select Point-to-site configuration to open the Point-to-site configuration page.
At the top of the Point-to-site configuration page, select Download VPN client. This doesn’t download VPN client software, it generates the configuration package used to configure VPN clients. It takes a few minutes for the client configuration package to generate. During this time, you may not see any indications until the packet has generated.
PowerShell
$profile=New-AzVpnClientConfiguration -ResourceGroupName "local-dev-vnet-0001" -Name "local-dev-vpn-0001" -AuthenticationMethod "EapTls"
$profile.VPNProfileSASUrlResourceGroupNameis the resource group of the virtual network (copy package name from your VNet bundle)Nameis the name of the virtual network gateway (copy package name from your VPN bundle)
Azure VPN Client
Make sure to consent to using Azure VPN in your tenant.
Tradeoffs
- Certificate authentication type not yet supported (work in progress)
- Downloading a VPN profile or certificates from Massdriver to authenticate not yet support (work in progress)
- RADIUS server not supported
| Variable | Type | Description |
|---|---|---|
| gateway.auth_type | string | The authentication type to use for the VPN connection. If using Microsoft Entra ID, be sure to authorize the Azure VPN app in your Azure account here. The authentication type cannot be changed after deployment. |
| gateway.generation | string | The generation for the VPN gateway. Learn more. |
| network.auto | boolean | Enabling this will automatically select an available CIDR range for your database. Unchecking will require you to specify the CIDR. |
