Downgrade vpn sku from vpngw2 to vpngw1

Question

Hi,

We want to downgrade the vpn gateway sku from vpngw2 to vpngw1. The guides on the website talk about upgrading but not downgrading.
Is it the same same procedure ? & Do we have to delete the existing gateway first and then add the new gateway or can we spin up new gateway before deleting the existing one to limit the downtime.

Below is the article that i have been reading.

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings

Answer 1

@admin Thank you for reaching out to Microsoft Q&A.

Regarding downgrading SKU,

If you have a VPN gateway and you want to use a different gateway SKU, your options are to either resize your gateway SKU, or to change to another SKU. When you change to another gateway SKU, you delete the existing gateway entirely and build a new one. Creating a gateway can often take 45 minutes or more, depending on the selected gateway SKU. In comparison, when you resize a gateway SKU, there is not much downtime because you do not have to delete and rebuild the gateway. If you have the option to resize your gateway SKU, rather than change it, you will want to do that. However, there are rules regarding resizing:

1. With the exception of the Basic SKU, you can resize a VPN gateway SKU to another VPN gateway SKU within the same generation (Generation1 or Generation2). For example, VpnGw1 of Generation1 can be resized to VpnGw2 of Generation1 but not to VpnGw2 of Generation2.
2. When working with the old gateway SKUs, you can resize between Basic, Standard, and High-performance SKUs.
3. You cannot resize from Basic/Standard/High-Performance SKUs to VpnGw SKUs. You must instead, change to the new SKUs.

Therefore, as discussed, you can upgrade/downgrade between the same generation SKUs i.e., VPN GW2 --> VPN GW1 only if they belong to the same generation. If not, you have to delete the existing VPN GW and create a new one of choice. Since a VNET can only have one VPN GW, it may not be possible to create a new one first and delete the old one. Hope this helps.

Please let us know if you have any further questions and we will be glad to assist you further. Thank you!

Remember:

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.

Want a reminder to come back and check responses? Here is how to subscribe to a notification.

Answer 2

Hi @admin ,

Here's also a thread discussing this which may be helpful:
https://www.reddit.com/r/AZURE/comments/a5wxal/vpn_gateway_sku_change/

----------

If the reply was helpful please don't forget to upvote and/or accept as answer, thank you!

Best regards,
Leon