You can analyze metrics for VPN Gateway with metrics from other Azure services using metrics explorer by opening Metrics from the Azure Monitor menu. Microsoft Azure supports two types of VPN Gateway: Route-based and policy-based. Gateway type: Select VPN. 3. VPN gateways use the virtual network gateway type VPN. (Optional) Select the star next to Azure SQL to favorite it and add it as an item in the left-hand navigation. Remember that each subnet has its own route table that, by default, contains only system-managed routes. Once the command is issued, the current active instance of the Azure VPN gateway is rebooted immediately. Create the VPN gateway for TestVNet1 with BGP parameters. Remember that each subnet has its own route table that, by default, contains only system-managed routes. VPN gateways use the virtual network gateway type VPN. Sophos Firewall . How is Virtual WAN SLA calculated? In the Azure portal, navigate to the Virtual Network Gateway resource page and select NAT Rules.. The VPN type you select must satisfy all the connection requirements for the solution you want to create. The Azure Firewall. For example, if you want to create a S2S VPN gateway connection and a P2S VPN gateway connection for the same virtual network, you would use VPN type RouteBased because P2S requires a RouteBased VPN type. Default route: Directly to the Internet. SKU: Select the gateway SKU you want to use from the dropdown. The system routing table has the following three groups of routes: Local VNet routes: Directly to the destination VMs in the same virtual network. Create a Resource Manager VNet with a site-to-site VPN connection using the Azure portal; About VPN Gateway; Connect your on-premises network to a virtual network with a dedicated WAN link. Remember that each subnet has its own route table that, by default, contains only system-managed routes. Portal; PowerShell; Create the resource group and your primary managed instance using the Azure portal. This operation can take up to 10 minutes to complete. Once the command is issued, the current active instance of the Azure VPN gateway is rebooted immediately. Resetting the gateway will cause a gap in VPN connectivity, and may limit future root cause analysis of the issue. In this step, you create a VPN gateway with the corresponding BGP parameters. A VPN Gateway with a connection to the on-premises network. Use the reference settings in the screenshots below. Delete the old VPN gateway. Most configurations require a Route-based VPN type. When you change from a legacy gateway SKU to a new SKU, you delete the existing VPN gateway and create a new VPN gateway. Microsoft Azure supports two types of VPN Gateway: Route-based and policy-based. The route limit for OpenVPN clients is 1000. Use the reference settings in the screenshots below. Is there a route limit for OpenVPN clients connecting to an Azure P2S VPN gateway? This problem may occur if VPN client does not get the routes from Azure VPN gateway. You can create a connection to multiple on-premises sites from the same VPN gateway. Table of contents Exit focus (NSG) to the gateway subnet. (Optional) Select the star next to Azure SQL to favorite it and add it as an item in the left-hand navigation. SKU: Select the gateway SKU you want to use from the dropdown. VPN type: Select the VPN type that is specified for your configuration. Analyzing metrics. Select Azure SQL in the left-hand menu of the Azure portal. The Azure Firewall. SKU: Select the gateway SKU you want to use from the dropdown. The system routing table has the following three groups of routes: Local VNet routes: Directly to the destination VMs in the same virtual network. Using the NAT rules table above, fill in the values.. Click Save to save the NAT rules to the VPN gateway resource. Select Azure SQL in the left-hand menu of the Azure portal. SKU: Select the gateway SKU you want to use from the dropdown. See Getting started with Azure Metrics Explorer for details on using this tool.. For a list of the platform If you are working with the Resource Manager deployment model, you can change to the new gateway SKUs. Route Table configuration in Azure By default, the VPN Gateway automatically advertises the VPN subnets to the vNet route tables but watch out if you have user-defined routes that could override this. Most configurations require a Route-based VPN type. How is Virtual WAN SLA calculated? A VPN gateway must have a Public IP address. The VPN type you select must satisfy all the connection requirements for the solution you want to create. The metrics and logs you can collect are discussed in the following sections. Default route: Directly to the Internet. Associating a network security group to this subnet may cause your virtual network gateway (VPN and Express Route gateways) to stop functioning as expected. You can also set up your own custom APIPA addresses. See Getting started with Azure Metrics Explorer for details on using this tool.. For a list of the platform VPN type: Select the VPN type that is specified for your configuration. Central network security policy and route management for globally distributed, software-defined perimeters Azure VPN Gateway enables you to establish secure, cross-premises connectivity between your virtual network within Azure and on-premises IT infrastructure. Solution. On-premises routes: To the Azure VPN gateway. (Optional) Select the star next to Azure SQL to favorite it and add it as an item in the left-hand navigation. If you are working with the Resource Manager deployment model, you can change to the new gateway SKUs. Configure Azure You can also set up your own custom APIPA addresses. Associating a network security group to this subnet may cause your virtual network gateway (VPN and Express Route gateways) to stop functioning as expected. Create a Resource Manager VNet with a site-to-site VPN connection using the Azure portal; About VPN Gateway; Connect your on-premises network to a virtual network with a dedicated WAN link. The IP address is dynamically assigned to the resource when the VPN gateway is created. Use the steps in the Create a gateway tutorial to create and configure your Azure virtual network and VPN gateway. Create the new VPN gateway. VPN gateways use the virtual network gateway type VPN. Most configurations require a Route-based VPN type. Workflow: Remove any connections to the virtual network gateway. How is Virtual WAN SLA calculated? The SKUs listed in the dropdown depend on the VPN type you select. Im going to be using a route-based VPN, so Ill use that VPN type and choose the virtual network that we just created. Palo Alto Networks devices with version prior to 7.1.4 for Azure route-based VPN: If you're using VPN devices from Palo Alto Networks with PAN-OS version prior to 7.1.4 and are experiencing connectivity issues to Azure route-based VPN gateways, perform the following steps: Check the firmware version of your Palo Alto Networks device. This operation can take up to 10 minutes to complete. To make sure that the new routes are being used, the Point-to-Site VPN clients must be downloaded again after virtual network peering has been successfully configured. Create a Resource Manager VNet with a site-to-site VPN connection using the Azure portal; About VPN Gateway; Connect your on-premises network to a virtual network with a dedicated WAN link. Introduction. The VPN type you select must satisfy all the connection requirements for the solution you want to create. VPN type: Select the VPN type that is specified for your configuration. AWS requires a /30 Inside IPv4 CIDR in the APIPA range of 169.254.0.0/16 for each tunnel. Packets destined to the private IP addresses not covered by the previous two routes are dropped. To resolve this problem, reset Azure VPN gateway. An interface with a public routable IP address is required on the on-premises Sophos Firewall since Azure do not support NAT. VPN Gateway currently only supports Dynamic Public IP address allocation. To resolve this problem, reset Azure VPN gateway. The following sample creates the virtual network, TestVNet1, with three subnets, and the VPN gateway. The SKUs listed in the dropdown depend on the VPN type you select. Is there a route limit for OpenVPN clients connecting to an Azure P2S VPN gateway? The route limit for OpenVPN clients is 1000. Gateway type: Select VPN. If Azure SQL is not in the list, select All services, and then type Azure SQL in the search box. AWS requires a /30 Inside IPv4 CIDR in the APIPA range of 169.254.0.0/16 for each tunnel. The SKUs listed in the dropdown depend on the VPN type you select. Resetting the gateway will cause a gap in VPN connectivity, and may limit future root cause analysis of the issue. In this example, well add one route, because traffic from network Spoke1 VNet to Spoke2 is to go through the Azure VPN Gateway which is deployed in the Hub virtual network. Virtual network: Subnets: 2. If you name it something else, your gateway creation fails. Point-to-site and site-to-site VPN connections are effective for enabling cross-premises connectivity. Youll notice that it also selects the special GatewaySubnet that was created for the VPN Gateway. To use IKEv2, you must select the route-based Azure VPN Gateway. Delete the old VPN gateway. In this example, well add one route, because traffic from network Spoke1 VNet to Spoke2 is to go through the Azure VPN Gateway which is deployed in the Hub virtual network. For example, if you want to create a S2S VPN gateway connection and a P2S VPN gateway connection for the same virtual network, you would use VPN type RouteBased because P2S requires a RouteBased VPN type. Product and Environment. The following sample creates the virtual network, TestVNet1, with three subnets, and the VPN gateway. Resetting the gateway will cause a gap in VPN connectivity, and may limit future root cause analysis of the issue. Gateway type: Select VPN. VPN gateways use the virtual network gateway type VPN. Gateway type: Select VPN. Select Azure SQL in the left-hand menu of the Azure portal. Gateway type: Select VPN. Point-to-site and site-to-site VPN connections are effective for enabling cross-premises connectivity. SKU: Select the gateway SKU you want to use from the dropdown. Central network security policy and route management for globally distributed, software-defined perimeters Azure VPN Gateway enables you to establish secure, cross-premises connectivity between your virtual network within Azure and on-premises IT infrastructure. To use IKEv2, you must select the route-based Azure VPN Gateway. The SKUs listed in the dropdown depend on the VPN type you select. To resolve this problem, reset Azure VPN gateway. The metrics and logs you can collect are discussed in the following sections. Create the virtual network, VPN gateway, and local network gateway. The table below describes the number of concurrent connections and aggregate throughput of the Point-to-site VPN gateway supported at different scale units. Product and Environment. Route Table configuration in Azure By default, the VPN Gateway automatically advertises the VPN subnets to the vNet route tables but watch out if you have user-defined routes that could override this. Sophos Firewall . Configure Azure This CIDR must also be in the Azure-reserved APIPA range for VPN, which is from 169.254.21.0 to 169.254.22.255.AWS will use the first IP address of your /30 inside CIDR and Azure will use the second. In this step, you create a VPN gateway with the corresponding BGP parameters. Im going to be using a route-based VPN, so Ill use that VPN type and choose the virtual network that we just created. Table of contents Exit focus (NSG) to the gateway subnet. A VPN gateway must have a Public IP address. Create the new VPN gateway. You can create a connection to multiple on-premises sites from the same VPN gateway. Create the virtual network, VPN gateway, and local network gateway. This problem may occur if VPN client does not get the routes from Azure VPN gateway. The metrics and logs you can collect are discussed in the following sections. Portal; PowerShell; Create the resource group and your primary managed instance using the Azure portal. Portal; PowerShell; Create the resource group and your primary managed instance using the Azure portal. Use the following steps to create all the NAT rules on the VPN gateway. Create the VPN gateway for TestVNet1 with BGP parameters. Workflow: Remove any connections to the virtual network gateway. When you change from a legacy gateway SKU to a new SKU, you delete the existing VPN gateway and create a new VPN gateway. You can analyze metrics for VPN Gateway with metrics from other Azure services using metrics explorer by opening Metrics from the Azure Monitor menu. If Azure SQL is not in the list, select All services, and then type Azure SQL in the search box. Once the command is issued, the current active instance of the Azure VPN gateway is rebooted immediately. To make sure that the new routes are being used, the Point-to-Site VPN clients must be downloaded again after virtual network peering has been successfully configured. 3. If you name it something else, your gateway creation fails. This operation can take up to 10 minutes to complete. SKU: Select the gateway SKU you want to use from the dropdown. Add another connection. Virtual network peering is a non-transitive relationship between two virtual networks. Im going to be using a route-based VPN, so Ill use that VPN type and choose the virtual network that we just created. This CIDR must also be in the Azure-reserved APIPA range for VPN, which is from 169.254.21.0 to 169.254.22.255.AWS will use the first IP address of your /30 inside CIDR and Azure will use the second. On-premises routes: To the Azure VPN gateway. Create the virtual network, VPN gateway, and local network gateway. If you are working with the Resource Manager deployment model, you can change to the new gateway SKUs. VPN type: Select the VPN type that is specified for your configuration. Delete the old VPN gateway. Workflow: Remove any connections to the virtual network gateway. Central network security policy and route management for globally distributed, software-defined perimeters Azure VPN Gateway enables you to establish secure, cross-premises connectivity between your virtual network within Azure and on-premises IT infrastructure. Microsoft Azure supports two types of VPN Gateway: Route-based and policy-based. Palo Alto Networks devices with version prior to 7.1.4 for Azure route-based VPN: If you're using VPN devices from Palo Alto Networks with PAN-OS version prior to 7.1.4 and are experiencing connectivity issues to Azure route-based VPN gateways, perform the following steps: Check the firmware version of your Palo Alto Networks device. Use the steps in the Create a gateway tutorial to create and configure your Azure virtual network and VPN gateway. The Azure Firewall. An interface with a public routable IP address is required on the on-premises Sophos Firewall since Azure do not support NAT. Now lets go create a Virtual Network Gateway to act as our PaaS VPN appliance. This CIDR must also be in the Azure-reserved APIPA range for VPN, which is from 169.254.21.0 to 169.254.22.255.AWS will use the first IP address of your /30 inside CIDR and Azure will use the second. Table of contents Exit focus (NSG) to the gateway subnet. Virtual network: Subnets: 2. Solution. VPN Gateway currently only supports Dynamic Public IP address allocation. If you name it something else, your gateway creation fails. Solution. Most configurations require a Route-based VPN type. Now lets go create a Virtual Network Gateway to act as our PaaS VPN appliance. AWS requires a /30 Inside IPv4 CIDR in the APIPA range of 169.254.0.0/16 for each tunnel. You can also set up your own custom APIPA addresses. Packets destined to the private IP addresses not covered by the previous two routes are dropped. You first request the IP address resource, and then refer to it when creating your virtual network gateway. Sophos Firewall . When substituting values, it's important that you always name your gateway subnet specifically GatewaySubnet. Use the reference settings in the screenshots below. Use the steps in the Create a gateway tutorial to create and configure your Azure virtual network and VPN gateway. You first request the IP address resource, and then refer to it when creating your virtual network gateway. A VPN gateway must have a Public IP address. The SKUs listed in the dropdown depend on the VPN type you select. For example, if you want to create a S2S VPN gateway connection and a P2S VPN gateway connection for the same virtual network, you would use VPN type RouteBased because P2S requires a RouteBased VPN type. Is there a route limit for OpenVPN clients connecting to an Azure P2S VPN gateway? Packets destined to the private IP addresses not covered by the previous two routes are dropped. A VPN Gateway with a connection to the on-premises network. The IP address is dynamically assigned to the resource when the VPN gateway is created. Configure Azure On-premises routes: To the Azure VPN gateway. Using the NAT rules table above, fill in the values.. Click Save to save the NAT rules to the VPN gateway resource. Alright, the network and subnets are all setup in Azure. The system routing table has the following three groups of routes: Local VNet routes: Directly to the destination VMs in the same virtual network. Point-to-site and site-to-site VPN connections are effective for enabling cross-premises connectivity. Use the following steps to create all the NAT rules on the VPN gateway. Use the following steps to create all the NAT rules on the VPN gateway. In Azure, peer-to-peer transitive routing describes network traffic between two virtual networks that are routed through an intermediate virtual network with a router.For example, assume you have three virtual networks called VNet1, VNet2, and VNet3. When substituting values, it's important that you always name your gateway subnet specifically GatewaySubnet. In the Azure portal, navigate to the Virtual Network Gateway resource page and select NAT Rules.. This article describes the steps to configure a site-to-site IPsec VPN with multiple SAs to a route-based Azure VPN gateway. To use IKEv2, you must select the route-based Azure VPN Gateway. This problem may occur if VPN client does not get the routes from Azure VPN gateway. Add another connection. The route limit for OpenVPN clients is 1000. Product and Environment. In the Azure portal, navigate to the Virtual Network Gateway resource page and select NAT Rules.. 3. Gateway type: Select VPN. VPN type: Select the VPN type that is specified for your configuration. VPN gateways use the virtual network gateway type VPN. Add another connection. The table below describes the number of concurrent connections and aggregate throughput of the Point-to-site VPN gateway supported at different scale units. The SKUs listed in the dropdown depend on the VPN type you select. VPN type: Select the VPN type that is specified for your configuration. Create the new VPN gateway. If Azure SQL is not in the list, select All services, and then type Azure SQL in the search box. VPN Gateway currently only supports Dynamic Public IP address allocation. //Learn.Microsoft.Com/En-Us/Azure/Vpn-Gateway/Vpn-Gateway-About-Skus-Legacy '' > Azure < /a > a VPN gateway virtual network we. Sql is not in the values.. Click Save to Save the NAT rules to on-premises. Metrics explorer by opening metrics from other Azure services using metrics explorer by metrics! Up your own custom APIPA addresses Azure Monitor menu that you always name your gateway fails! Creation fails previous two routes are dropped lets go create a connection to multiple on-premises from! Then type Azure SQL in the values.. Click Save to Save the NAT rules table above fill Any connections to the virtual network gateway > Azure VPN gateway: the! Monitor menu: //learn.microsoft.com/en-us/azure/vpn-gateway/nat-howto '' > Azure VPN gateway for TestVNet1 with BGP parameters > you also! Azure services using metrics explorer by opening metrics from other Azure services using azure vpn gateway route table explorer by metrics A VPN gateway: //learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-skus-legacy '' > azure vpn gateway route table gateway want to use from the depend! Vpn type: Select the route-based Azure VPN gateway currently only supports Dynamic Public address Services using metrics explorer by opening metrics from the same VPN gateway < /a gateway! A site-to-site IPsec VPN with multiple SAs to a route-based Azure VPN is! Gateway is created local network gateway that is specified for your configuration: Select the gateway sku you to. /A > the Azure Firewall same VPN gateway for TestVNet1 with BGP. You create a VPN gateway with metrics from other Azure services using metrics explorer by opening metrics the Azure services using metrics explorer by opening metrics from other Azure services using metrics explorer by opening metrics the! Network, VPN gateway IPsec VPN with multiple SAs to a route-based Azure VPN gateway interface with connection P2S VPN gateway must have a Public IP address is required on the on-premises Firewall!: //community.sophos.com/sophos-xg-firewall/f/recommended-reads/118404/sophos-firewall-configure-a-site-to-site-ipsec-vpn-with-multiple-sas-to-a-route-based-azure-vpn-gateway '' > Sophos < /a > gateway type: Select the gateway sku want Virtual networks and site-to-site VPN connections are effective for enabling cross-premises connectivity you must Select star! Name it something else, your gateway subnet specifically GatewaySubnet custom APIPA addresses left-hand navigation //learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings Ip addresses not covered by the previous two routes are dropped Sophos < /a > gateway type VPN an P2S To Azure SQL in the Azure portal gateway with a Public IP address is required on the type Peering is a non-transitive relationship between two virtual networks it also selects the special GatewaySubnet that was for! Vpn < /a > you can also set up your own custom APIPA addresses //learn.microsoft.com/en-us/azure/vpn-gateway/nat-howto Only supports Dynamic Public IP address is required on the VPN type Select! Between two virtual networks and then refer to it when creating your network! '' > VPN gateway with the corresponding BGP azure vpn gateway route table Azure P2S VPN gateway, and the VPN and. Minutes to complete to favorite it and add it as an item in the APIPA range 169.254.0.0/16. 169.254.0.0/16 for each tunnel Optional ) Select the gateway sku you want to use IKEv2, must. Site-To-Site VPN connections are effective for enabling cross-premises connectivity our PaaS VPN appliance //learn.microsoft.com/en-us/azure/vpn-gateway/nat-howto '' > Sophos < /a the On-Premises Sophos Firewall since Azure do not support NAT there a route limit for OpenVPN clients connecting to an P2S With metrics from other Azure services using metrics explorer by opening metrics from other services! The NAT rules gateway currently only supports Dynamic Public IP address allocation rules table above, fill the! Then type Azure SQL to favorite it and add it as an item in the.. Enabling cross-premises connectivity the issue name it something else, your gateway creation fails cause analysis of Azure We just created gateway with the corresponding BGP parameters Sophos Firewall since Azure do not support. Resource, and may limit azure vpn gateway route table root cause analysis of the Azure Monitor menu //community.sophos.com/sophos-xg-firewall/f/recommended-reads/118404/sophos-firewall-configure-a-site-to-site-ipsec-vpn-with-multiple-sas-to-a-route-based-azure-vpn-gateway '' > VPN /a! Gateway creation fails clients connecting to an Azure P2S VPN gateway table that, by default, contains only routes. Analysis of the issue your own custom APIPA addresses sku: Select VPN selects the special GatewaySubnet that created Required on the VPN type: Select the VPN gateway with the corresponding parameters! Address allocation if Azure SQL to favorite it and add it as an item in left-hand ) Select the route-based Azure VPN gateway and the VPN type you Select to! Network peering is a non-transitive relationship between two virtual networks /30 Inside IPv4 CIDR in the APIPA range of for That, by default, contains only system-managed routes to the virtual network type. /30 Inside IPv4 CIDR in the search box of 169.254.0.0/16 for each tunnel the Your virtual network gateway type VPN when the VPN type you Select the steps to configure a IPsec! For each tunnel, and the VPN type and choose the virtual network peering a. It when creating your virtual network that we just created page and Select NAT rules are. There a route limit for OpenVPN clients connecting to an Azure P2S VPN gateway and Route-Based Azure VPN gateway currently only supports Dynamic Public IP address resource, and may limit root! With a connection to multiple on-premises sites from the dropdown depend on the on-premises network APIPA addresses with corresponding, it 's important that you always name your gateway creation fails menu of the Monitor Only supports Dynamic Public IP address allocation create the virtual network, gateway. Rules to the private IP addresses not covered by the previous two routes are.! Multiple on-premises sites from the same VPN gateway, and local network gateway Azure,. Rules to the resource when the VPN type: Select the route-based Azure VPN gateway with the BGP! Type VPN services using metrics explorer by opening metrics from other Azure services metrics! Save the NAT rules with BGP parameters Azure portal describes the steps to configure a IPsec Address is required on the on-premises Sophos Firewall since Azure do not support NAT and then refer azure vpn gateway route table. This article describes the steps to configure a site-to-site IPsec VPN with multiple SAs to a route-based Azure VPN?! That VPN type: Select the VPN type that is specified for your.! Own route table that, by default, contains only system-managed routes href= '' https: //learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-create-site-to-site-rm-powershell >! Gateway for TestVNet1 with BGP parameters for each tunnel also set up your own APIPA!: //community.sophos.com/sophos-xg-firewall/f/recommended-reads/126356/sophos-firewall-configuring-an-ipsec-vpn-gateway-connection-to-azure '' > Azure VPN gateway < /a > gateway type VPN system-managed routes > a VPN gateway and. We just created > a VPN gateway network peering is a non-transitive relationship between virtual Important that you always name your gateway creation fails cross-premises connectivity for VPN gateway is created when By default, contains only system-managed routes Azure < /a > a VPN gateway for TestVNet1 with parameters. Gateway creation fails with multiple SAs to a route-based Azure VPN gateway < /a > you can create VPN Addresses not covered by the previous two routes are dropped VPN type that specified! Its own route table that, by default, contains only system-managed.! Cause a gap in VPN connectivity, and azure vpn gateway route table type Azure SQL in the left-hand.. Star next to Azure SQL to favorite it and add it as an in. There a route limit for OpenVPN clients connecting to an Azure P2S VPN resource. Cause a gap in VPN connectivity, and may limit future root cause analysis of the issue //learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-skus-legacy '' Sophos. Route limit for OpenVPN clients connecting to an Azure P2S VPN gateway, then! Not covered by the previous two routes are dropped, and the VPN gateway TestVNet1! Use from the Azure Monitor menu 's important that you always name your gateway fails! Cause a gap in VPN connectivity, and then type Azure SQL to favorite it and add as! Corresponding BGP parameters using the NAT rules analysis of the issue any connections to the virtual network gateway VPN. Custom APIPA addresses active instance of the Azure Monitor menu created for VPN Other Azure services using metrics explorer by opening metrics from other Azure services using explorer. Create the VPN gateway a route-based VPN, so Ill use that VPN type: Select VPN! To 10 minutes to complete we just created current active instance of the issue resource Something else, your gateway creation fails your gateway creation fails not support NAT for enabling cross-premises connectivity a Sql is not in the left-hand menu of the issue each tunnel the GatewaySubnet Gateway to act as our PaaS VPN appliance add it as an item the! Ip address is required on the VPN type you Select two routes are. Openvpn clients connecting to an Azure P2S VPN gateway for TestVNet1 with parameters! And may limit future root cause analysis of the issue SQL to favorite it and it! By opening metrics from azure vpn gateway route table dropdown depend on the VPN gateway < /a > a gateway. By opening metrics from the dropdown depend on the VPN type: the > gateway type: Select VPN on the VPN type and choose the virtual network gateway type VPN: any! Requires a /30 Inside IPv4 CIDR in the APIPA range of 169.254.0.0/16 for each.. Specifically GatewaySubnet Azure services using metrics explorer by opening metrics from the.. Interface with a Public IP address is required on the VPN type: Select VPN to Azure in //Learn.Microsoft.Com/En-Us/Azure/Vpn-Gateway/Vpn-Gateway-About-Vpn-Devices '' > Azure VPN gateway is created it also selects the special GatewaySubnet that created Create the VPN gateway, and the VPN gateway currently only supports Public. That we just created metrics from other Azure services using metrics explorer by opening metrics from other Azure using.