How do I export a VPN configuration (not template) for a VPN appliance on Azure Gov.

Al Perez 0

I am running an Azure Gov tenant and the export VPN configuration. This option is not available or in a location I cannot find.

KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2024-03-28T04:49:51.73+00:00
@Al Perez ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you are trying to download the device configuration for an OnPrem VPN Device from Azure VPN Gateway in Azure Gov Cloud.

Ideally, this should be same as a regular Azure Public Cloud.

Navigate to the VPN Connection (not Gateway) and check for the option "Download Configuration". Refer to this doc

If this option is not present, can you please share a screenshot of what you see?

Additionally, you can also make use of Azure Powershell to do this.

See : Download the configuration script - Azure PowerShell

Can you share the results of the above commands?

Cheers,

Kapil
Al Perez 0 Reputation points

2024-03-28T13:22:20.0933333+00:00
HI Kapil,

TY for replying. As the screen capture demonstrates this option is missing. There is Refresh, Move and Delete. Download configuration is missing. I already tried the PowerShell commands you sent and had no success there either. I tried this again and I was certain of the variables being accurate. It appears that this script is looking for the subscription ID. Please see the PowerShell response below the image. I am discovering significant issues with Microsoft documentation. TY,

Al

WARNING: The names of some imported commands from the module 'Microsoft.Azure.PowerShell.Cmdlets.Network' include unapproved verbs

that might make them less discoverable. To find the commands with unapproved verbs, run the Import-Module command again with the

Verbose parameter. For a list of approved verbs, type Get-Verb.

Get-AzVirtualNetworkGatewaySupportedVpnDevice : 'this.Client.SubscriptionId' cannot be null.

At line:6 char:1

Get-AzVirtualNetworkGatewaySupportedVpnDevice -Name $GWName -Resource ...

+ CategoryInfo : CloseError: (:) [Get-AzVirtualNe...portedVpnDevice], ValidationException + FullyQualifiedErrorId : Microsoft.Azure.Commands.Network.GetAzureRmVirtualNetworkGatewaySupportedVpnDevice

Get-AzVirtualNetworkGatewayConnectionVpnDeviceConfigScript : 'this.Client.SubscriptionId' cannot be null.

At line:9 char:1

Get-AzVirtualNetworkGatewayConnectionVpnDeviceConfigScript -Name $Con ...

+ CategoryInfo : CloseError: (:) [Get-AzVirtualNe...iceConfigScript], ValidationException + FullyQualifiedErrorId : Microsoft.Azure.Commands.Network.GetAzureRmVirtualNetworkGatewayConnectionVpnDeviceConfigScript
KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2024-04-01T03:13:34.4466667+00:00

@Al Perez ,

Thank you for sharing the details.

It appears this is not an expected behavior. You should be able to extract the device configuration from a connection object.

To troubleshoot further, we will need a specialized 1:1 session, where a support engineer can have a screen share session to pinpoint the issue. If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

Cheers,

Kapil