Deploying an Azure VPN gateway
In this section, we will learn how to protect an AVD environment with a VPN gateway. When the AVD environment is configured with private access, the user needs a method to make a private connection to the Azure environment. This can be accomplished by using a VPN connection. The IT admin can provision an Azure VPN gateway to ensure that the users can connect over a private network. There are two different kinds of VPN tunnels that can be created:
- A site-to-site (S2S) VPN connection
- A point-to-site (P2S) VPN connection
Before creating the VPN gateway, the IT admin needs to create a subnet that will be used by the gateway. This subnet needs to have the name GatewaySubnet and a subnet mask of /27 or larger.
Figure 11.41 – GatewaySubnet
To deploy the VPN gateway, the IT admin can use the following PowerShell script. The variables need to be changed to fit the organization:
$vnet = Get-AzVirtualNetwork...
