About Virtual WAN gateway settings

  • Article

This article helps you understand Virtual WAN gateway settings.

Gateway scale units

The gateway scale unit setting lets you pick the aggregate throughput of the gateway in the virtual hub. Each type of gateway scale unit (site-to-site, user-vpn, and ExpressRoute) is configured separately.

Gateway scale units are different than routing infrastructure units. You adjust gateway scale units when you need more aggregated throughput for the gateway itself. You adjust hub infrastructure units when you want the hub router to support more VMs. For more information about hub settings and infrastructure units, see About virtual hub settings.

Site-to-site

Site-to-site VPN gateway scale units are configured on the Site to site page of the virtual hub. When configuring scale units, keep the following information in mind:

If you pick 1 scale unit = 500 Mbps, it implies that two instances for redundancy will be created, each having a maximum throughput of 500 Mbps.

For example, if you had five branches, each doing 10 Mbps at the branch, you'll need an aggregate of 50 Mbps at the head end. Planning for aggregate capacity of the Azure VPN gateway should be done after assessing the capacity needed to support the number of branches to the hub.

Screenshot shows gateway scale units for site-to-site.

Point-to-site (User VPN)

User VPN gateway scale units are configured on the Point to site page of the virtual hub. Gateway scale units represent the aggregate capacity of the User VPN gateway. When configuring scale units, keep the following information in mind:

If you select 40 or more gateway scale units, plan your client address pool accordingly. For information about how this setting impacts the client address pool, see About client address pools.

Screenshot shows gateway scale units for point-to-site.

ExpressRoute

ExpressRoute gateway scale units are configured on the ExpressRoute page of the virtual hub.

Screenshot shows gateway scale units for ExpressRoute.

Basic and Standard

The virtual WAN type (Basic or Standard) determines the types of resources that can be created within a hub, including the type of gateways that can be created (site-to-site VPN, point-to site User VPN, and ExpressRoute). This setting is configured on the virtual WAN object. For more information, see Upgrade from Basic to Standard.

The following table shows the configurations available for each virtual WAN type:

Virtual WAN type Hub type Available configurations
Basic Basic Site-to-site VPN only
Standard Standard ExpressRoute
User VPN (P2S)
VPN (site-to-site)
Inter-hub and VNet-to-VNet transiting through the virtual hub

Note

You can upgrade from Basic to Standard, but can't revert from Standard back to Basic.

Next steps