Azure / Enterprise-Scale

The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture
https://aka.ms/alz
MIT License
1.72k stars 980 forks source link

Bug Report: Basic IP configuration for VPN Virtual Network Gateways is not supported #1810

Open jdrepo opened 4 weeks ago

jdrepo commented 4 weeks ago

Describe the bug

Deployment of network topology "Hub and spoke with your own third-party NVA" creates basis public ip and VPN Gateway deployment gives an error

{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.","details":[{"code":"Conflict","message":"{\r\n \"status\": \"Failed\",\r\n \"error\": {\r\n \"code\": \"ResourceDeploymentFailure\",\r\n \"message\": \"The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'.\",\r\n \"details\": [\r\n {\r\n \"code\": \"DeploymentFailed\",\r\n \"message\": \"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.\",\r\n \"details\": [\r\n {\r\n \"code\": \"Conflict\",\r\n \"message\": \"{\\r\\n \\\"status\\\": \\\"Failed\\\",\\r\\n \\\"error\\\": {\\r\\n \\\"code\\\": \\\"ResourceDeploymentFailure\\\",\\r\\n \\\"message\\\": \\\"The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'.\\\",\\r\\n \\\"details\\\": [\\r\\n {\\r\\n \\\"code\\\": \\\"DeploymentFailed\\\",\\r\\n \\\"message\\\": \\\"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.\\\",\\r\\n \\\"details\\\": [\\r\\n {\\r\\n \\\"code\\\": \\\"BadRequest\\\",\\r\\n \\\"message\\\": \\\"{\\\\r\\\\n \\\\\\\"error\\\\\\\": {\\\\r\\\\n \\\\\\\"code\\\\\\\": \\\\\\\"PublicIpWithBasicSkuNotAllowedOnVPNGateways\\\\\\\",\\\\r\\\\n \\\\\\\"message\\\\\\\": \\\\\\\"Basic IP configuration for VPN Virtual Network Gateways is not supported. Follow the link for more details : https://go.microsoft.com/fwlink/p/?linkid=2241350 /subscriptions/xxxxxxxx-b42b-4f90-8cd5-xxxxxxxxxx8/resourceGroups/alz-portal-vnethub-germanywestcentral/providers/Microsoft.Network/virtualNetworkGateways/alz-portal-vpngw-germanywestcentral\\\\\\\",\\\\r\\\\n \\\\\\\"details\\\\\\\": []\\\\r\\\\n }\\\\r\\\\n}\\\"\\r\\n }\\r\\n ]\\r\\n }\\r\\n ]\\r\\n }\\r\\n}\"\r\n }\r\n ]\r\n }\r\n ]\r\n }\r\n}"}]}

Steps to reproduce

Screenshots Image

Image

Image

Springstone commented 2 weeks ago

@jdrepo thanks for reporting! Confirm the same behavior. We did put a fix in for this for standard hub & spoke but looks like we missed NVA version. Will get it fixed soon.

Springstone commented 2 weeks ago

Trackin in AB#38129

Springstone commented 2 weeks ago

Addressed in PR #1830