Solved

Purpose of Azure Gateway Subnet when creating a VPN

Posted on 2016-10-29
3
229 Views
Last Modified: 2016-11-12
I'm starting to get my feet wet with Azure. I've been getting myself familiar with the VM's, networking, etc.

One area where I am confused is when creating a VPN, every Azure article i find has you creating a Gateway Subnet. What is the purpose of creating this when I've already created an address space and then a couple subnets within that address space? I know i must be missing something but it seems to be a waste of IP's and subnets (even if you make it a /27 or /28) when creating a Gateway Subnet.

Is it just for the VPN or something else?
0
Comment
Question by:msidnam
  • 2
3 Comments
 
LVL 7

Expert Comment

by:No More
ID: 41865208
To configure a virtual network gateway, you first need to create a gateway subnet for your VNet. The gateway subnet must be named GatewaySubnet to work properly. This name lets Azure know that this subnet should be used for the gateway.

The minimum size of your gateway subnet depends entirely on the configuration that you want to create. Although it is possible to create a gateway subnet as small as /29, we recommend that you create a gateway subnet of /28 or larger (/28, /27, /26, etc.).

Creating a larger gateway size prevents you from running up against gateway size limitations. For example, you may have created a virtual network gateway with a gateway subnet size /29 for a S2S connection. You now want to configure a S2S/ExpressRoute coexist configuration. That configuration requires a gateway subnet minimum size /28. To create your configuration, you would have to modify the gateway subnet to accommodate the minimum requirement for the connection, which is /28.
0
 
LVL 2

Author Comment

by:msidnam
ID: 41865224
Thank you, but this seems to be straight from the other articles I've read. I'm trying to understand why the gateway subnet is needed. Is it just a bridge from the VPN connections to the address space and other subjects?

The reason I am asking is because if I like azure I will be moving a large network to it and I want to make sure I create the address space, subnets, gateway sinners, VPNs, etc with enough IPs since it looks like changing or moving VMs to different address spaces isn't easy.

Right now it looks like I should create an address space of something like 192.168.0.0/16. Create several /24 subnets within that range and possible a /23 gateway subnet for VPN. But to me that seems like a waste but probably something that should be done to be safe and to make sure I don't run out of IPs.
0
 
LVL 7

Accepted Solution

by:
No More earned 500 total points
ID: 41865237
Is cloud environment it doesn't matter if you waste IP address spaces

It's all about security and routing between subnets

You can always contact support and they will help you, in case you run in problems or you are not sure about anything
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Azure SQl vs DocumentDB 2 22
Azure automation - upgrade from Free to Basic - how to? 8 11
Domain Controller Time Sync Question 4 29
Advice on new Server provisioning 6 28
Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
Or at least that’s the word according to a new blog from Tech Target on AWS’s new Managed Services (MS) offering. According to the blog, AWS is launching their AWS MS program to expedite the adoption of cloud by Fortune 1000 and Global 2000 companie…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question