az network vpn-server-config

Manage VPN server configuration.

Commands

az network vpn-server-config create

Create a VPN server configuration.

az network vpn-server-config delete

Delete a VPN server configuration.

az network vpn-server-config ipsec-policy

Manage VPN server configuration IPSec policies.

az network vpn-server-config ipsec-policy add

Add an IPSec policy to a VPN server configuration.

az network vpn-server-config ipsec-policy list

List VPN server configuration IPSec policies.

az network vpn-server-config ipsec-policy remove

Remove an IPSec policy from a VPN server configuration.

az network vpn-server-config ipsec-policy wait

Place the CLI in a waiting state until a condition of the IPSec policy of a VPN server configuration is met.

az network vpn-server-config list

List all VPN server configuration.

az network vpn-server-config set

Set settings of a VPN server configuration.

az network vpn-server-config show

Show the details of a VPN server configuration.

az network vpn-server-config wait

Place the CLI in a waiting state until a condition of the VPN server configuration is met.

az network vpn-server-config create

Create a VPN server configuration.

az network vpn-server-config create --name
                                    --resource-group
                                    [--aad-audience]
                                    [--aad-issuer]
                                    [--aad-tenant]
                                    [--auth-types {AAD, Certificate, Radius}]
                                    [--location]
                                    [--no-wait]
                                    [--protocols {IkeV2, OpenVPN}]
                                    [--radius-client-root-certs]
                                    [--radius-server-root-certs]
                                    [--radius-servers]
                                    [--vpn-client-revoked-certs]
                                    [--vpn-client-root-certs]

Examples

Create a VPN server configuration with VPN auth type

az network vpn-server-config create -n MyVPNServerConfig -g MyRG --vpn-client-root-certs "ApplicationGatewayAuthCert.cer" --vpn-client-revoked-certs "ApplicationGatewayAuthCert.pem"

Required Parameters

--name -n

Name of the Vpn server configuration.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--aad-audience

AAD Vpn authentication parameter AAD audience.

--aad-issuer

AAD Vpn authentication parameter AAD issuer.

--aad-tenant

AAD Vpn authentication parameter AAD tenant.

--auth-types

VPN authentication types for the VpnServerConfiguration.

accepted values: AAD, Certificate, Radius
--location -l

Location. Values from: az account list-locations. You can configure the default location using az configure --defaults location=<location>.

--no-wait

Do not wait for the long-running operation to finish.

--protocols

VPN protocols for the VpnServerConfiguration.

accepted values: IkeV2, OpenVPN
--radius-client-root-certs

List of Radius client root certificate file paths.

--radius-server-root-certs

List of Radius server root certificate file paths.

--radius-servers

Radius Server configuration.

--vpn-client-revoked-certs

List of VPN client revoked certificate file paths.

--vpn-client-root-certs

List of VPN client root certificate file paths.

az network vpn-server-config delete

Delete a VPN server configuration.

az network vpn-server-config delete --name
                                    --resource-group
                                    [--yes]

Required Parameters

--name -n

Name of the Vpn server configuration.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--yes -y

Do not prompt for confirmation.

az network vpn-server-config list

List all VPN server configuration.

az network vpn-server-config list [--resource-group]

Optional Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

az network vpn-server-config set

Set settings of a VPN server configuration.

az network vpn-server-config set --name
                                 --resource-group
                                 [--aad-audience]
                                 [--aad-issuer]
                                 [--aad-tenant]
                                 [--auth-types {AAD, Certificate, Radius}]
                                 [--location]
                                 [--no-wait]
                                 [--protocols {IkeV2, OpenVPN}]
                                 [--radius-client-root-certs]
                                 [--radius-server-root-certs]
                                 [--radius-servers]
                                 [--vpn-client-revoked-certs]
                                 [--vpn-client-root-certs]

Examples

Set a VPN server configuration with Radius auth type

az network vpn-server-config set -n MyVPNServerConfig -g MyRG --radius-client-root-certs "ApplicationGatewayAuthCert.cer" --radius-server-root-certs "ApplicationGatewayAuthCert.pem" --radius-servers address=test1 secret=clitest score=10 --radius-servers address=test2 secret=clitest score=10

Required Parameters

--name -n

Name of the Vpn server configuration.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--aad-audience

AAD Vpn authentication parameter AAD audience.

--aad-issuer

AAD Vpn authentication parameter AAD issuer.

--aad-tenant

AAD Vpn authentication parameter AAD tenant.

--auth-types

VPN authentication types for the VpnServerConfiguration.

accepted values: AAD, Certificate, Radius
--location -l

Location. Values from: az account list-locations. You can configure the default location using az configure --defaults location=<location>.

--no-wait

Do not wait for the long-running operation to finish.

--protocols

VPN protocols for the VpnServerConfiguration.

accepted values: IkeV2, OpenVPN
--radius-client-root-certs

List of Radius client root certificate file paths.

--radius-server-root-certs

List of Radius server root certificate file paths.

--radius-servers

Radius Server configuration.

--vpn-client-revoked-certs

List of VPN client revoked certificate file paths.

--vpn-client-root-certs

List of VPN client root certificate file paths.

az network vpn-server-config show

Show the details of a VPN server configuration.

az network vpn-server-config show --name
                                  --resource-group

Required Parameters

--name -n

Name of the Vpn server configuration.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

az network vpn-server-config wait

Place the CLI in a waiting state until a condition of the VPN server configuration is met.

az network vpn-server-config wait --name
                                  --resource-group
                                  [--created]
                                  [--custom]
                                  [--deleted]
                                  [--exists]
                                  [--interval]
                                  [--timeout]
                                  [--updated]

Required Parameters

--name -n

Name of the Vpn server configuration.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--created

Wait until created with 'provisioningState' at 'Succeeded'.

--custom

Wait until the condition satisfies a custom JMESPath query. E.g. provisioningState!='InProgress', instanceView.statuses[?code=='PowerState/running'].

--deleted

Wait until deleted.

--exists

Wait until the resource exists.

--interval

Polling interval in seconds.

default value: 30
--timeout

Maximum wait in seconds.

default value: 3600
--updated

Wait until updated with provisioningState at 'Succeeded'.