question

RajaPrasadShaw avatar image
0 Votes"
RajaPrasadShaw asked RajaPrasadShaw action

Can't create a Virtual Network Gateway in Microsoft Azure

I'm trying to create a Virtual Network Gateway but getting the error "The operation failed because the network security group NSG-centralus can not be associated to the GatewaySubnet. Please remove the network security group associated to the GatewaySubnet. No changes have occurred on the gateway at this time."

I've tried to remove NSG from the default subnet of the virtual network but when I click to save the subnet with NSG section as None, it comes back reflecting the default NSG. I tried creating a new subnet with NSG-None but it gets saved with default NSG. I'm unable to figure out what to do to fix this.

azure-stack-hub
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

SaiKishor-MSFT avatar image
0 Votes"
SaiKishor-MSFT answered SaiKishor-MSFT commented

@RajaPrasadShaw-8383 As discussed here in this document, When working with gateway subnets, avoid associating a network security group (NSG) to the gateway subnet. Associating a network security group to this subnet may cause your Virtual Network gateway(VPN, Express Route gateway) to stop functioning as expected.

When you name a subnet as GatewaySubnet but try to associate a NSG to it, you will get this error as this is not allowed.

However, I am unable to understand what you mean by- I've tried to remove NSG from the default subnet of the virtual network but when I click to save the subnet with NSG section as None, it comes back reflecting the default NSG.

Could yu provide a snapshot of this behavior and steps that you are following after which you receive this error? Thank you!

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.