Back to Details

azure-vpn-gateway

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Azure VPN Gateway Skill

Azure VPN Gateway 技能

This skill provides expert guidance for Azure VPN Gateway. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.
本技能为Azure VPN Gateway提供专业指导，涵盖故障排查、最佳实践、决策制定、架构与设计模式、限制与配额、安全、配置、集成与编码模式以及部署。它结合了本地快速参考内容与远程文档获取能力。

How to Use This Skill

如何使用本技能

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., 
L35-L120
), use 
read_file
with the specified lines. For categories with file links (e.g., 
[security.md](security.md)
), use 
read_file
on the linked reference file
IMPORTANT for Agent: If 
metadata.generated_at
is more than 3 months old, suggest the user pull the latest version from the repository. If 
mcp_microsoftdocs
tools are not available, suggest the user install it: Installation Guide
This skill requires network access to fetch documentation content:
  • Preferred: Use 
    mcp_microsoftdocs:microsoft_docs_fetch
    with query string 
    from=learn-agent-skill
    . Returns Markdown.
  • Fallback: Use 
    fetch_webpage
    with query string 
    from=learn-agent-skill&accept=text/markdown
    . Returns Markdown.
Agent 重要提示：请使用下方的分类索引定位相关章节。对于带有行范围的分类（例如 
L35-L120
），使用
read_file
读取指定行内容。对于带有文件链接的分类（例如 
[security.md](security.md)
），使用
read_file
读取链接的参考文件
Agent 重要提示：如果
metadata.generated_at
已超过3个月，建议用户从仓库拉取最新版本。如果
mcp_microsoftdocs
工具不可用，建议用户安装该工具：安装指南
本技能需要网络访问权限以获取文档内容：
  • 首选方式：使用
    mcp_microsoftdocs:microsoft_docs_fetch
    ，查询字符串为
    from=learn-agent-skill
    ，返回Markdown格式内容。
  • 备用方式：使用
    fetch_webpage
    ，查询字符串为
    from=learn-agent-skill&accept=text/markdown
    ，返回Markdown格式内容。

Category Index

分类索引

CategoryLinesDescription
TroubleshootingL37-L45Diagnosing and fixing Azure VPN Gateway issues: client prerequisite checks, packet capture, gateway/connection resets, connection health verification, and known bugs/release notes.
Best PracticesL46-L50Guidance on using network virtual appliances (NVAs) in Azure as VPN endpoints for remote access, including design, routing, security, and integration with Azure VPN Gateway.
Decision MakingL51-L60Guidance on choosing VPN Gateway SKUs, planning/migrating gateways and public IPs, and designing/transitioning P2S/remote access (SSTP to IKEv2/OpenVPN, Classic to ARM) setups
Architecture & Design PatternsL61-L67Design patterns and guidance for choosing VPN Gateway topologies, configuring active-active gateways, and building highly available, resilient site-to-site connectivity.
Limits & QuotasL68-L72VPN Gateway client version history, SKU comparisons, and FAQs about gateway limits, scale, performance, and connection behavior
SecurityL73-L95Securing Azure VPN Gateway: IPsec/IKE policies, forced tunneling, cert/RADIUS auth, Entra ID & MFA for P2S, client config (Win/macOS/Linux), access control, roles, and crypto best practices.
ConfigurationL96-L153Configuring Azure VPN Gateway and clients: P2S/S2S setup, auth (cert, RADIUS, Entra), BGP, IPsec/NAT, routing, monitoring, Always-On, VNet-to-VNet, and supported devices.
Integrations & Coding PatternsL154-L161Configuring Azure VPN Gateway with on-prem devices and services: NPS/RADIUS VSAs for P2S, S2S over ExpressRoute, Cisco ASA samples, and BGP VPN connectivity with AWS.
DeploymentL162-L174Deploying and migrating Azure VPN Gateways: create/upgrade gateways and SKUs, switch active/active modes, set up S2S VPNs, and manage client profiles and IP migrations via PowerShell/CLI.
分类行范围描述
故障排查L37-L45诊断并修复Azure VPN Gateway问题：客户端先决条件检查、数据包捕获、网关/连接重置、连接健康验证以及已知缺陷/发行说明。
最佳实践L46-L50关于在Azure中使用网络虚拟设备（NVA）作为远程访问VPN端点的指导，包括设计、路由、安全以及与Azure VPN Gateway的集成。
决策制定L51-L60关于选择VPN Gateway SKU、规划/迁移网关和公网IP、设计/过渡P2S/远程访问（从SSTP到IKEv2/OpenVPN、从经典模式到ARM模式）设置的指导
架构与设计模式L61-L67选择VPN Gateway拓扑、配置主动-主动网关以及构建高可用、弹性站点到站点连接的设计模式与指导。
限制与配额L68-L72VPN Gateway客户端版本历史、SKU对比，以及关于网关限制、扩展、性能和连接行为的常见问题解答
安全L73-L95保护Azure VPN Gateway：IPsec/IKE策略、强制隧道、证书/RADIUS认证、P2S的Entra ID与MFA、客户端配置（Win/macOS/Linux）、访问控制、角色以及加密最佳实践。
配置L96-L153配置Azure VPN Gateway和客户端：P2S/S2S设置、认证（证书、RADIUS、Entra）、BGP、IPsec/NAT、路由、监控、Always-On、VNet到VNet以及支持的设备。
集成与编码模式L154-L161将Azure VPN Gateway与本地设备和服务配置集成：P2S的NPS/RADIUS VSA、通过ExpressRoute的S2S、Cisco ASA示例以及与AWS的BGP VPN连接。
部署L162-L174部署和迁移Azure VPN Gateway：创建/升级网关和SKU、切换主动/主动-主动模式、设置S2S VPN，以及通过PowerShell/CLI管理客户端配置文件和IP迁移。

Troubleshooting

故障排查

TopicURL
Run Azure VPN Client prerequisites check and fix issueshttps://learn.microsoft.com/en-us/azure/vpn-gateway/azure-vpn-client-prerequisites-check
Use packet capture on VPN Gateway for diagnosticshttps://learn.microsoft.com/en-us/azure/vpn-gateway/packet-capture
Reset VPN Gateway or connection to restore IPsec tunnelshttps://learn.microsoft.com/en-us/azure/vpn-gateway/reset-gateway
Verify Azure VPN Gateway connection healthhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager
Review Azure VPN Gateway release notes and issueshttps://learn.microsoft.com/en-us/azure/vpn-gateway/whats-new
主题链接
运行Azure VPN客户端先决条件检查并修复问题https://learn.microsoft.com/en-us/azure/vpn-gateway/azure-vpn-client-prerequisites-check
在VPN Gateway上使用数据包捕获进行诊断https://learn.microsoft.com/en-us/azure/vpn-gateway/packet-capture
重置VPN网关或连接以恢复IPsec隧道https://learn.microsoft.com/en-us/azure/vpn-gateway/reset-gateway
验证Azure VPN Gateway连接健康状况https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager
查看Azure VPN Gateway发行说明和问题https://learn.microsoft.com/en-us/azure/vpn-gateway/whats-new

Best Practices

最佳实践

TopicURL
Use NVAs in Azure for remote access scenarioshttps://learn.microsoft.com/en-us/azure/vpn-gateway/nva-work-remotely-support
主题链接
在Azure中使用NVA实现远程访问场景https://learn.microsoft.com/en-us/azure/vpn-gateway/nva-work-remotely-support

Decision Making

决策制定

TopicURL
Select the right Azure VPN Gateway SKUhttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-gateway-skus
Plan migration from Basic to Standard VPN public IPhttps://learn.microsoft.com/en-us/azure/vpn-gateway/basic-public-ip-migrate-about
Map and migrate Azure VPN Gateway SKUshttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-sku-consolidation
Migrate P2S connections from SSTP to IKEv2/OpenVPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/ikev2-openvpn-from-sstp
Migrate VPN Gateways from Classic to Resource Managerhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-classic-resource-manager-migration
Plan remote work using P2S VPN Gatewayshttps://learn.microsoft.com/en-us/azure/vpn-gateway/work-remotely-support
主题链接
选择合适的Azure VPN Gateway SKUhttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-gateway-skus
规划从Basic到Standard VPN公网IP的迁移https://learn.microsoft.com/en-us/azure/vpn-gateway/basic-public-ip-migrate-about
映射并迁移Azure VPN Gateway SKUhttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-sku-consolidation
将P2S连接从SSTP迁移到IKEv2/OpenVPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/ikev2-openvpn-from-sstp
将VPN网关从经典模式迁移到资源管理器模式https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-classic-resource-manager-migration
使用P2S VPN网关规划远程办公https://learn.microsoft.com/en-us/azure/vpn-gateway/work-remotely-support

Architecture & Design Patterns

架构与设计模式

TopicURL
Design and configure active-active VPN Gatewayshttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-active-active-gateways
Select Azure VPN Gateway topologies and designshttps://learn.microsoft.com/en-us/azure/vpn-gateway/design
Design highly available Azure VPN Gateway connectivityhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable
主题链接
设计并配置主动-主动VPN网关https://learn.microsoft.com/en-us/azure/vpn-gateway/about-active-active-gateways
选择Azure VPN Gateway拓扑和设计https://learn.microsoft.com/en-us/azure/vpn-gateway/design
设计高可用Azure VPN Gateway连接https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

Limits & Quotas

限制与配额

TopicURL
Compare Azure VPN Gateway legacy SKUs and limitshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-skus-legacy
主题链接
对比Azure VPN Gateway旧版SKU和限制https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-skus-legacy

Security

安全

TopicURL
Implement forced tunneling for S2S VPN connectionshttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-site-to-site-tunneling
Configure custom IPsec/IKE policies in Azure portalhttps://learn.microsoft.com/en-us/azure/vpn-gateway/ipsec-ike-policy-howto
Enable multifactor authentication for P2S VPN usershttps://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-mfa
Configure P2S VPN with Entra ID and manual app registrationhttps://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant
Configure P2S VPN with Microsoft Entra ID authhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway
Migrate P2S Entra VPN from manual to Microsoft app IDhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway-update
Create or update custom Entra app ID for P2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-register-custom-app
Configure P2S access control by Entra users and groupshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-users-access
Configure Linux Azure VPN Client for Entra ID P2S authhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-linux
Configure macOS Azure VPN Client for Entra ID P2S authhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-mac
Configure Device SSO with Azure VPN Client on Windowshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-windows-device-sso
Configure Azure VPN Gateway for P2S RADIUS authenticationhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-radius-gateway
Understand roles and permissions for VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/roles-permissions
Apply security best practices to Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/secure-vpn-gateway
Use certificate authentication for S2S VPN connectionshttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-certificate-authentication-gateway-about
Configure S2S certificate authentication using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-certificate-authentication-gateway-powershell
Meet cryptographic requirements for Azure VPN gatewayshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-compliance-crypto
Configure custom IPsec/IKE policies with PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-ipsecikepolicy-rm-powershell
Integrate Azure P2S RADIUS with NPS for MFAhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-radius-mfa-nsp
主题链接
为S2S VPN连接实现强制隧道https://learn.microsoft.com/en-us/azure/vpn-gateway/about-site-to-site-tunneling
在Azure门户中配置自定义IPsec/IKE策略https://learn.microsoft.com/en-us/azure/vpn-gateway/ipsec-ike-policy-howto
为P2S VPN用户启用多因素认证https://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-mfa
使用Entra ID和手动应用注册配置P2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant
使用Microsoft Entra ID认证配置P2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway
将P2S Entra VPN从手动应用ID迁移到Microsoft应用IDhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway-update
为P2S VPN创建或更新自定义Entra应用IDhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-register-custom-app
通过Entra用户和组配置P2S访问控制https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-users-access
为Entra ID P2S认证配置Linux Azure VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-linux
为Entra ID P2S认证配置macOS Azure VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-mac
在Windows上配置Azure VPN客户端的设备单点登录https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-windows-device-sso
为P2S RADIUS认证配置Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-radius-gateway
了解VPN Gateway的角色和权限https://learn.microsoft.com/en-us/azure/vpn-gateway/roles-permissions
为Azure VPN Gateway应用安全最佳实践https://learn.microsoft.com/en-us/azure/vpn-gateway/secure-vpn-gateway
为S2S VPN连接使用证书认证https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-certificate-authentication-gateway-about
使用PowerShell配置S2S证书认证https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-certificate-authentication-gateway-powershell
满足Azure VPN网关的加密要求https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-compliance-crypto
使用PowerShell配置自定义IPsec/IKE策略https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-ipsecikepolicy-rm-powershell
将Azure P2S RADIUS与NPS集成以实现MFAhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-radius-mfa-nsp

Configuration

配置

TopicURL
Generate P2S VPN client profiles for Entra authenticationhttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-vpn-profile-download
Add or remove S2S connections on a VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/add-remove-site-to-site-connections
Configure optional Azure VPN Client settings for P2Shttps://learn.microsoft.com/en-us/azure/vpn-gateway/azure-vpn-client-optional-configurations
Configure BGP for VPN Gateway using Azure CLIhttps://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-how-to-cli
Configure BGP for VPN Gateway using portalhttps://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto
Create custom IPsec policies for P2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-custom-policies-p2s-ps
Configure custom traffic selectors for VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/custom-traffic-selectors
Configure customer-controlled maintenance windows for VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/customer-controlled-gateway-maintenance
Configure monitoring for Azure VPN Gateway with Azure Monitorhttps://learn.microsoft.com/en-us/azure/vpn-gateway/monitor-vpn-gateway
Reference for Azure VPN Gateway monitoring datahttps://learn.microsoft.com/en-us/azure/vpn-gateway/monitor-vpn-gateway-reference
Configure NAT rules on Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/nat-howto
View and disconnect Azure P2S VPN sessionshttps://learn.microsoft.com/en-us/azure/vpn-gateway/p2s-session-management
Configure Azure VPN Client for Linux with P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificate-client-linux-azure-vpn-client
Configure P2S certificate authentication on VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificate-gateway
Generate P2S VPN certificates on Linux with OpenSSLhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificates-linux-openssl
Configure Azure VPN Client with Entra ID on Windowshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-windows
Configure P2S VPN with RADIUS using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-how-to-radius-ps
Install P2S client certificates on Windows, macOS, Linuxhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-how-to-vpn-client-install-azure-cert
Configure P2S VPN user groups and IP poolshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-user-groups-about
Configure macOS native VPN client for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-mac
Configure Linux strongSwan IKEv2 client for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-ike-linux
Configure iOS OpenVPN client for P2S certificate VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-ios
Configure Linux OpenVPN client for P2S certificate VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-linux
Configure macOS OpenVPN client for P2S certificate VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-mac
Configure Azure VPN Client on Windows for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-azure-vpn-client
Configure Windows native client for P2S certificate VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-native
Configure OpenVPN 2.x Windows client for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-openvpn-client
Configure OpenVPN 3.x Windows client for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-openvpn-client-version-3
Configure VPN client for P2S RADIUS certificate authhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-certificate
Configure VPN client for other P2S RADIUS methodshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-other
Configure VPN client for P2S RADIUS password authhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-password
Configure high-bandwidth S2S tunnels via ExpressRoutehttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel
Configure forced tunneling for S2S VPN with Default Sitehttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-tunneling
Overview of partner VPN device configurations for Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-3rdparty-device-config-overview
Understand Point-to-Site VPN routing behavior in Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing
Supported VPN devices and IPsec parameters for Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices
Azure VPN Gateway resource and connection settingshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings
Configure BGP for VPN Gateway using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-bgp-resource-manager-ps
Generate P2S VPN certificates using Windows PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site
Generate P2S VPN certificates on Linux with strongSwanhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site-linux
Generate P2S VPN certificates using MakeCerthttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site-makecert
Connect classic VNets to ARM VNets via portalhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-different-deployment-models-portal
Connect classic VNets to ARM VNets with PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-different-deployment-models-powershell
Connect route-based gateway to multiple policy-based deviceshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-rm-ps
Configure Windows Always-On VPN device tunnel to Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-device-tunnel
Configure macOS Always-On VPN device tunnel to Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-device-tunnel-macos
Configure Windows Always-On VPN user tunnel to Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-user-tunnel
Configure P2S VPN with certificate auth using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-rm-ps
Connect VNets with VNet-to-VNet using Azure CLIhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli
Configure VNet-to-VNet VPN connection in portalhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal
Advertise custom routes to P2S VPN clientshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes
Configure VPN gateway transit for VNet peeringhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit
Connect VNets with VNet-to-VNet using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vnet-vnet-rm-ps
Configure and understand Azure VPN Gateway settingshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq
主题链接
为Entra认证生成P2S VPN客户端配置文件https://learn.microsoft.com/en-us/azure/vpn-gateway/about-vpn-profile-download
在VPN网关中添加或移除S2S连接https://learn.microsoft.com/en-us/azure/vpn-gateway/add-remove-site-to-site-connections
为P2S配置可选的Azure VPN客户端设置https://learn.microsoft.com/en-us/azure/vpn-gateway/azure-vpn-client-optional-configurations
使用Azure CLI为VPN Gateway配置BGPhttps://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-how-to-cli
使用门户为VPN Gateway配置BGPhttps://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto
为P2S VPN创建自定义IPsec策略https://learn.microsoft.com/en-us/azure/vpn-gateway/create-custom-policies-p2s-ps
为VPN Gateway配置自定义流量选择器https://learn.microsoft.com/en-us/azure/vpn-gateway/custom-traffic-selectors
为VPN Gateway配置客户控制的维护窗口https://learn.microsoft.com/en-us/azure/vpn-gateway/customer-controlled-gateway-maintenance
使用Azure Monitor配置Azure VPN Gateway的监控https://learn.microsoft.com/en-us/azure/vpn-gateway/monitor-vpn-gateway
Azure VPN Gateway监控数据参考https://learn.microsoft.com/en-us/azure/vpn-gateway/monitor-vpn-gateway-reference
在Azure VPN Gateway上配置NAT规则https://learn.microsoft.com/en-us/azure/vpn-gateway/nat-howto
查看并断开Azure P2S VPN会话https://learn.microsoft.com/en-us/azure/vpn-gateway/p2s-session-management
为P2S证书配置Linux Azure VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificate-client-linux-azure-vpn-client
在VPN Gateway上配置P2S证书认证https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificate-gateway
使用OpenSSL在Linux上生成P2S VPN证书https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificates-linux-openssl
在Windows上配置带有Entra ID的Azure VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-windows
使用PowerShell配置带有RADIUS的P2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-how-to-radius-ps
在Windows、macOS、Linux上安装P2S客户端证书https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-how-to-vpn-client-install-azure-cert
配置P2S VPN用户组和IP池https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-user-groups-about
为P2S证书配置macOS原生VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-mac
为P2S证书配置Linux strongSwan IKEv2客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-ike-linux
为P2S证书VPN配置iOS OpenVPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-ios
为P2S证书VPN配置Linux OpenVPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-linux
为P2S证书VPN配置macOS OpenVPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-mac
为P2S证书配置Windows上的Azure VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-azure-vpn-client
为P2S证书VPN配置Windows原生客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-native
为P2S证书配置OpenVPN 2.x Windows客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-openvpn-client
为P2S证书配置OpenVPN 3.x Windows客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-openvpn-client-version-3
为P2S RADIUS证书认证配置VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-certificate
为其他P2S RADIUS方法配置VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-other
为P2S RADIUS密码认证配置VPN客户端https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-password
通过ExpressRoute配置高带宽S2S隧道https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel
使用默认站点为S2S VPN配置强制隧道https://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-tunneling
Azure合作伙伴VPN设备配置概述https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-3rdparty-device-config-overview
了解Azure中Point-to-Site VPN的路由行为https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing
Azure支持的VPN设备和IPsec参数https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices
Azure VPN Gateway资源和连接设置https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings
使用PowerShell为VPN Gateway配置BGPhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-bgp-resource-manager-ps
使用Windows PowerShell生成P2S VPN证书https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site
使用strongSwan在Linux上生成P2S VPN证书https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site-linux
使用MakeCert生成P2S VPN证书https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site-makecert
通过门户连接经典VNet与ARM VNethttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-different-deployment-models-portal
使用PowerShell连接经典VNet与ARM VNethttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-different-deployment-models-powershell
将基于路由的网关连接到多个基于策略的设备https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-rm-ps
配置Windows Always-On VPN设备隧道连接到Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-device-tunnel
配置macOS Always-On VPN设备隧道连接到Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-device-tunnel-macos
配置Windows Always-On VPN用户隧道连接到Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-user-tunnel
使用PowerShell配置带有证书认证的P2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-rm-ps
使用Azure CLI通过VNet-to-VNet连接VNethttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli
在门户中配置VNet-to-VNet VPN连接https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal
向P2S VPN客户端通告自定义路由https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes
为VNet对等互连配置VPN网关传输https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit
使用PowerShell通过VNet-to-VNet连接VNethttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vnet-vnet-rm-ps
配置并理解Azure VPN Gateway设置https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq

Integrations & Coding Patterns

集成与编码模式

TopicURL
Configure NPS RADIUS VSAs for P2S user groupshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-user-groups-radius
Configure S2S VPN over ExpressRoute private peeringhttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-vpn-private-peering
Sample Cisco ASA configuration for Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-3rdparty-device-config-cisco-asa
Configure BGP VPN connection between Azure and AWShttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-aws-bgp
主题链接
为P2S用户组配置NPS RADIUS VSAhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-user-groups-radius
通过ExpressRoute专用对等互连配置S2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-vpn-private-peering
Azure VPN Gateway的Cisco ASA配置示例https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-3rdparty-device-config-cisco-asa
配置Azure与AWS之间的BGP VPN连接https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-aws-bgp

Deployment

部署

TopicURL
Execute Basic-to-Standard public IP migration for VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/basic-public-ip-migrate-howto
Create a Basic SKU VPN Gateway via PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-gateway-basic-sku-powershell
Deploy a VPN Gateway using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-gateway-powershell
Deploy a VPN Gateway using Azure CLIhttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-cli
Deploy zone-redundant VPN and ExpressRoute gatewayshttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-zone-redundant-vnet-gateway
Change Azure VPN Gateway between active and active-activehttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-change-active-active
Upgrade Azure VPN Gateway SKU with minimal downtimehttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-sku-upgrade
Create S2S VPN with shared key using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-create-site-to-site-rm-powershell
Create S2S VPN with shared key using Azure CLIhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli
Deploy Azure VPN client profiles using Intunehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-profile-intune
主题链接
执行为VPN Gateway进行Basic到Standard公网IP的迁移https://learn.microsoft.com/en-us/azure/vpn-gateway/basic-public-ip-migrate-howto
通过PowerShell创建Basic SKU VPN网关https://learn.microsoft.com/en-us/azure/vpn-gateway/create-gateway-basic-sku-powershell
使用PowerShell部署VPN网关https://learn.microsoft.com/en-us/azure/vpn-gateway/create-gateway-powershell
使用Azure CLI部署VPN网关https://learn.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-cli
部署区域冗余VPN和ExpressRoute网关https://learn.microsoft.com/en-us/azure/vpn-gateway/create-zone-redundant-vnet-gateway
在主动和主动-主动模式之间切换Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-change-active-active
以最小停机时间升级Azure VPN Gateway SKUhttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-sku-upgrade
使用PowerShell创建带有共享密钥的S2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-create-site-to-site-rm-powershell
使用Azure CLI创建带有共享密钥的S2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli
使用Intune部署Azure VPN客户端配置文件https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-profile-intune