Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →
microsoftdocs avatar

Azure Vpn Gateway

microsoftdocs/agent-skills

  • 113 installs
  • 682 repo stars
  • Updated August 3, 2026
  • microsoftdocs/agent-skills

Helps with ai & agent building tasks during AI-assisted development.

About

azure-vpn-gateway is a Claude Code skill for ai & agent building. It helps solo builders move faster with AI-assisted coding.

  • azure-vpn-gateway
  • AI & Agent Building
  • AI-coding skill

Azure Vpn Gateway by the numbers

  • 113 all-time installs (skills.sh)
  • +10 installs in the week ending Aug 4, 2026 (Skillselion tracking)
  • Ranked #3,968 of 16,546 AI & Agent Building skills by installs in the Skillselion catalog
  • Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/microsoftdocs/agent-skills --skill azure-vpn-gateway

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

Listed on Skillselion
Installs113
repo stars★ 682
Last updatedAugust 3, 2026
Repositorymicrosoftdocs/agent-skills ↗

What it does

Helps with ai & agent building tasks during AI-assisted development.

Files

SKILL.mdMarkdownGitHub ↗

Azure VPN Gateway Skill

This skill provides expert guidance for Azure VPN Gateway. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file
IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL37-L44Diagnosing and fixing Azure VPN Gateway issues: client prerequisites, packet captures, tunnel resets, connection health checks, and answers to common troubleshooting FAQs.
Best PracticesL45-L49Guidance on using network virtual appliances (NVAs) in Azure as VPN endpoints for remote access, including design, routing, security, and integration with Azure VPN Gateway.
Decision MakingL50-L61Guidance on choosing VPN Gateway SKUs and planning/migrating configurations: IP SKUs, SKUs mapping, P2S protocols/clients, Linux client migration, Classic-to-ARM, and remote work P2S setups.
Architecture & Design PatternsL62-L68Design patterns and guidance for choosing VPN Gateway topologies, configuring active-active gateways, and building highly available, resilient site-to-site connectivity.
Limits & QuotasL69-L73VPN Gateway client version history, SKU comparisons, and FAQs about gateway limits, scale, performance, and connection behavior
SecurityL74-L95Security configuration for Azure VPN Gateway: IPsec/IKE policies, cert/RADIUS/Entra auth, MFA, P2S/S2S access control, crypto requirements, and security best practices.
ConfigurationL96-L155Configuring Azure VPN Gateway and clients: S2S/P2S setup, auth (cert, Entra, RADIUS), BGP, IPsec/NAT/routing, dual-stack, monitoring, and client/device-specific connection guides.
Integrations & Coding PatternsL156-L163Configuring Azure VPN Gateway with on-prem devices and services: NPS/RADIUS VSAs for P2S, S2S over ExpressRoute, Cisco ASA samples, and BGP VPN connectivity with AWS.
DeploymentL164-L176Deploying and migrating Azure VPN Gateways: create/upgrade gateways and SKUs, switch active/active modes, set up S2S VPNs, and manage client profiles and IP migrations via PowerShell/CLI.

Troubleshooting

TopicURL
Run Azure VPN Client prerequisites check and fix issueshttps://learn.microsoft.com/en-us/azure/vpn-gateway/azure-vpn-client-prerequisites-check
Use packet capture on VPN Gateway for diagnosticshttps://learn.microsoft.com/en-us/azure/vpn-gateway/packet-capture
Reset VPN Gateway or connection to restore IPsec tunnelshttps://learn.microsoft.com/en-us/azure/vpn-gateway/reset-gateway
Verify Azure VPN Gateway connection healthhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-verify-connection-resource-manager

Best Practices

TopicURL
Use NVAs in Azure for remote access scenarioshttps://learn.microsoft.com/en-us/azure/vpn-gateway/nva-work-remotely-support

Decision Making

TopicURL
Select appropriate Azure VPN Gateway SKUhttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-gateway-skus
Plan migration from Azure VPN Client for Linuxhttps://learn.microsoft.com/en-us/azure/vpn-gateway/azure-vpn-client-linux-retirement
Plan migration from Basic to Standard VPN public IPhttps://learn.microsoft.com/en-us/azure/vpn-gateway/basic-public-ip-migrate-about
Map and migrate Azure VPN Gateway SKUshttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-sku-consolidation
Migrate Azure P2S VPN connections from SSTP to IKEv2/OpenVPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/ikev2-openvpn-from-sstp
Migrate P2S VPN from manual to Microsoft-registered clienthttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway-update
Migrate VPN Gateways from Classic to Resource Managerhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-classic-resource-manager-migration
Plan remote work using P2S VPN Gatewayshttps://learn.microsoft.com/en-us/azure/vpn-gateway/work-remotely-support

Architecture & Design Patterns

TopicURL
Design and configure active-active VPN Gatewayshttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-active-active-gateways
Select Azure VPN Gateway topologies and designshttps://learn.microsoft.com/en-us/azure/vpn-gateway/design
Design highly available Azure VPN Gateway connectivityhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

Limits & Quotas

TopicURL
Compare Azure VPN Gateway legacy SKUs and limitshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-skus-legacy

Security

TopicURL
Implement forced tunneling for S2S VPN connectionshttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-site-to-site-tunneling
Configure custom IPsec/IKE policies in Azure portalhttps://learn.microsoft.com/en-us/azure/vpn-gateway/ipsec-ike-policy-howto
Enable multifactor authentication for P2S VPN usershttps://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-mfa
Configure P2S VPN with Entra ID and manual client apphttps://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant
View and disconnect Azure P2S VPN sessions securelyhttps://learn.microsoft.com/en-us/azure/vpn-gateway/p2s-session-management
Manage VPN gateway root certificate migration for P2Shttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about-gateway-certificate-migration
Create custom audience app ID for P2S Entra VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-register-custom-app
Configure P2S access control by Entra users and groupshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-users-access
Configure macOS Azure VPN Client for Entra ID P2S authhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-mac
Configure Device SSO with Azure VPN Client on Windowshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-windows-device-sso
Set up P2S RADIUS VPN with PowerShell for Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-how-to-radius-ps
Configure P2S RADIUS authentication in Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-radius-gateway
Understand roles and permissions for VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/roles-permissions
Apply security best practices to Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/secure-vpn-gateway
Use certificate authentication for S2S VPN connectionshttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-certificate-authentication-gateway-about
Configure S2S certificate authentication using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-certificate-authentication-gateway-powershell
Meet cryptographic requirements for Azure VPN gatewayshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-compliance-crypto
Integrate Azure P2S RADIUS with NPS for MFAhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-radius-mfa-nsp

Configuration

TopicURL
Generate P2S VPN client profiles for Entra authenticationhttps://learn.microsoft.com/en-us/azure/vpn-gateway/about-vpn-profile-download
Add or remove S2S connections on a VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/add-remove-site-to-site-connections
Configure optional Azure VPN Client settings for P2Shttps://learn.microsoft.com/en-us/azure/vpn-gateway/azure-vpn-client-optional-configurations
Configure BGP for VPN Gateway using Azure CLIhttps://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-how-to-cli
Enable and configure BGP for Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto
Create custom IPsec policies for P2S VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-custom-policies-p2s-ps
Configure custom traffic selectors for VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/custom-traffic-selectors
Configure customer-controlled maintenance windows for VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/customer-controlled-gateway-maintenance
Configure dual-stack IPv4/IPv6 for Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/ipv6-configuration
Configure monitoring for Azure VPN Gateway with Azure Monitorhttps://learn.microsoft.com/en-us/azure/vpn-gateway/monitor-vpn-gateway
Reference for Azure VPN Gateway monitoring datahttps://learn.microsoft.com/en-us/azure/vpn-gateway/monitor-vpn-gateway-reference
Configure NAT rules on Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/nat-howto
Configure Azure VPN Client for Linux with P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificate-client-linux-azure-vpn-client
Configure P2S certificate authentication on VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificate-gateway
Generate P2S VPN certificates on Linux with OpenSSLhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-certificates-linux-openssl
Configure P2S VPN gateway with Entra ID clienthttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway
Configure Azure VPN Client on Linux with Entra IDhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-linux
Configure Azure VPN Client with Entra ID on Windowshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-vpn-client-windows
Install P2S client certificates on Windows, macOS, Linuxhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-how-to-vpn-client-install-azure-cert
Configure P2S VPN user groups and IP poolshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-user-groups-about
Generate and update P2S VPN client profiles in Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-user-vpn-profile-update
Configure macOS native VPN client for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-cert-mac
Configure Linux strongSwan IKEv2 client for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-ike-linux
Configure iOS OpenVPN client for P2S certificate VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-ios
Configure Linux OpenVPN client for P2S certificate VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-linux
Configure macOS OpenVPN client for P2S certificate VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-openvpn-mac
Configure Azure VPN Client on Windows for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-azure-vpn-client
Configure Windows native client for P2S certificate VPNhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-native
Configure OpenVPN 2.x Windows client for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-openvpn-client
Configure OpenVPN 3.x Windows client for P2S certificateshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-certificate-windows-openvpn-client-version-3
Configure VPN client for P2S RADIUS certificate authhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-certificate
Configure VPN client for other P2S RADIUS methodshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-other
Configure VPN client for P2S RADIUS password authhttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-vpn-client-configuration-radius-password
Configure high-bandwidth S2S tunnels via ExpressRoutehttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-high-bandwidth-tunnel
Configure forced tunneling for S2S VPN in Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-tunneling
Understand Point-to-Site VPN routing behavior in Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing
Supported VPN devices and IPsec parameters for Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices
Azure VPN Gateway resource and connection settingshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings
Configure BGP for VPN Gateway using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-bgp-resource-manager-ps
Generate P2S VPN certificates using Windows PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site
Generate P2S VPN certificates on Linux with strongSwanhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site-linux
Generate P2S VPN certificates using MakeCerthttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site-makecert
Connect classic VNets to ARM VNets via VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-different-deployment-models-portal
Connect classic VNets to ARM VNets with PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-different-deployment-models-powershell
Configure route-based VPN to multiple policy-based deviceshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-rm-ps
Configure Windows Always-On VPN device tunnel to Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-device-tunnel
Configure macOS Always-On VPN device tunnel to Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-device-tunnel-macos
Configure Windows Always-On VPN user tunnel to Azurehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-always-on-user-tunnel
Configure certificate-based Point-to-Site VPN with PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-point-to-site-rm-ps
Configure VNet-to-VNet VPN connections using Azure CLIhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli
Configure VNet-to-VNet VPN connection in portalhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal
Configure custom IPsec/IKE policies with PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-ipsecikepolicy-rm-powershell
Advertise custom routes to P2S VPN clientshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes
Configure VPN gateway transit for VNet peeringhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit
Create VNet-to-VNet VPN connections with PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vnet-vnet-rm-ps
Configure and troubleshoot Azure VPN Gateway connectionshttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq

Integrations & Coding Patterns

TopicURL
Configure NPS RADIUS VSAs for P2S user groupshttps://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-user-groups-radius
Configure S2S VPN over ExpressRoute private peeringhttps://learn.microsoft.com/en-us/azure/vpn-gateway/site-to-site-vpn-private-peering
Sample Cisco ASA configuration for Azure VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-3rdparty-device-config-cisco-asa
Configure BGP VPN connection between Azure and AWShttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-aws-bgp

Deployment

TopicURL
Execute Basic-to-Standard public IP migration for VPN Gatewayhttps://learn.microsoft.com/en-us/azure/vpn-gateway/basic-public-ip-migrate-howto
Create a Basic SKU VPN Gateway via PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-gateway-basic-sku-powershell
Deploy a VPN Gateway using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-gateway-powershell
Deploy a VPN Gateway using Azure CLIhttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-cli
Deploy zone-redundant VPN and ExpressRoute gatewayshttps://learn.microsoft.com/en-us/azure/vpn-gateway/create-zone-redundant-vnet-gateway
Change Azure VPN Gateway between active and active-activehttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-change-active-active
Upgrade Azure VPN Gateway SKU with minimal downtimehttps://learn.microsoft.com/en-us/azure/vpn-gateway/gateway-sku-upgrade
Create S2S VPN with shared key using PowerShellhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-create-site-to-site-rm-powershell
Create S2S VPN with shared key using Azure CLIhttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-cli
Deploy Azure VPN client profiles using Intunehttps://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-profile-intune

Related skills

mattpocockSetup Matt Pocock SkillsScaffold the per-repo configuration that Matt Pocock’s engineering agent skills rely on so they understand the issue tracker, triage labels, and domain documentation la495k196kopen.feishu.cnLark AppsConnect Claude, Cursor or custom agents directly to Lark (Feishu) for messaging, document automation, approval workflows and enterprise data access.402kjuliusbrusseeCavemanSlash token usage by roughly 75% while keeping every technical detail intact when working with Claude Code, Cursor or similar agents.391k94.7klarksuiteLark Skill MakerQuickly turn any Lark/Feishu OpenAPI call or multi-step workflow into a reusable agent skill with its own SKILL.md.386k16kxixu-meRunning Claude Code Via Litellm CopilotRun Claude Code at a fraction of the cost by routing requests through LiteLLM to the GitHub Copilot Chat API.270k72runcomfy-comCodex PetGenerate a complete Codex Pet spritesheet and metadata from one reference image without needing an OpenAI key or Codex Pro.246k10
AI & Agent Buildingagents
Browse by category
AI & AgentsFrontend & DesignBackend & DataDev ToolsAutomationTesting & ReviewSecurityMonitoring & CloudDocs & Planning
Design & frontend
Design systemsAnimation & motionAccessibility (a11y)CSS & TailwindUI designUXDesign to codeshadcn/uiLanding pagesBest design skills
Most searched skills
find-skillscavemanfrontend-designbrainstormingsystematic-debuggingstop-slopemil-design-engui-ux-pro-maxkarpathy-guidelinesweb-design-guidelinesreact-best-practicesgrill-meimprovemicrosoft-foundryagent-browser
Browse all listings
All agent skillsAll MCP serversAll marketplacesAll plugins

This week in AI coding

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.