
This solution is useful for telecommuters who want to connect to Azure VNets from a remote location, such as from home or a conference. A P2S connection is established by starting it from the client computer. Point-to-Site VPNĪ Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer.

(**) denotes that this method contains steps that require PowerShell. This type of connection is sometimes referred to as a "multi-site" connection.ĭeployment models and methods for S2S Deployment model/method Because each virtual network can only have one VPN gateway, all connections through the gateway share the available bandwidth. When working with multiple connections, you must use a RouteBased VPN type (known as a dynamic gateway when working with classic VNets). You can create more than one VPN connection from your virtual network gateway, typically connecting to multiple on-premises sites. An additional advantage of active-active mode is that customers experience higher throughputs. Setting up VPN Gateway in active-active mode is recommended in which both the IPsec tunnels are simultaneously active, with data flowing through both tunnels at the same time. In this setup, traffic flows through the active tunnel, and if some issue happens with this tunnel, the traffic switches over to the standby tunnel. In active-standby mode, one IPsec tunnel is active and the other tunnel is in standby. VPN Gateway can be configured in active-standby mode using one public IP or in active-active mode using two public IPs. For information about selecting a VPN device, see the VPN Gateway FAQ - VPN devices. A S2S connection requires a VPN device located on-premises that has a public IP address assigned to it. S2S connections can be used for cross-premises and hybrid configurations. Site-to-Site VPNĪ Site-to-Site (S2S) VPN gateway connection is a connection over IPsec/IKE (IKEv1 or IKEv2) VPN tunnel. The diagrams show the main baseline topologies, but it's possible to build more complex configurations using the diagrams as guidelines.

Use the diagrams and descriptions to help select the connection topology to match your requirements. In the sections below, you can view design information and topology diagrams about the following VPN gateway connections. You need to determine which configuration best fits your needs. It's important to know that there are different configurations available for VPN gateway connections.
