ghost
commented
3 years ago Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @vpngwsuppgithub.
Issue Details
## Description Creating an virtual wan sit to site connection the ipsec policy is not working. also the PfsGroup PFS14 is not available in powershell but is in the gui ## Steps to reproduce $ipsecPolicy = New-AzIpsecPolicy -IkeEncryption AES256 -ikeintegrity SHA256 -DhGroup DHGroup14 -IpsecEncryption AES256 -IpsecIntegrity SHA256 -PfsGroup PFS24 -SALifeTimeSeconds 28800 -Verbose -debug $vpnSiteLinkConnection = New-AzVpnSiteLinkConnection -Name $vpnsitename -VpnSiteLink $vpnSite.VpnSiteLinks[0] -ConnectionBandwidth "200" -SharedKey $Secure_String_Pwd -IpSecPolicy $ipsecPolicy -VpnConnectionProtocolType IKEv2 -EnableBgp -Verbose -debug $vpnConnection=New-AzVpnConnection -ResourceGroupName $rgName -ParentResourceName $vpnGateway.Name -Name $vpnsitename -VpnSite $vpnSite -VpnSiteLinkConnection @($vpnSiteLinkConnection) PS C:\Windows\system32> @($vpnSiteLinkConnection) VpnSiteLink : Microsoft.Azure.Commands.Network.Models.PSVpnSiteLink SharedKey : VpnConnectionProtocolType : ConnectionStatus : EgressBytesTransferred : IngressBytesTransferred : IpsecPolicies : ConnectionBandwidth : 100 ## Environment data PS C:\Windows\system32> $PSVersionTable Name Value ---- ----- PSVersion 5.1.17763.2090 PSEdition Desktop PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...} BuildVersion 10.0.17763.2090 CLRVersion 4.0.30319.42000 WSManStackVersion 3.0 PSRemotingProtocolVersion 2.3 SerializationVersion 1.1.0.1 ``` ## Module versions Directory: C:\Program Files\WindowsPowerShell\Modules ModuleType Version Name ExportedCommands ---------- ------- ---- ---------------- Script 2.5.3 Az.Accounts {Disable-AzDataCollection, Disable-AzContextAutosave, Enable-AzDataCollection, Enable... Script 2.2.8 Az.Accounts {Disable-AzDataCollection, Disable-AzContextAutosave, Enable-AzDataCollection, Enable... Script 1.1.1 Az.Advisor {Get-AzAdvisorRecommendation, Enable-AzAdvisorRecommendation, Disable-AzAdvisorRecomm... Script 2.0.2 Az.Aks {Get-AzAksCluster, New-AzAksCluster, Remove-AzAksCluster, Import-AzAksCredential...} Script 1.1.4 Az.AnalysisServices {Resume-AzAnalysisServicesServer, Suspend-AzAnalysisServicesServer, Get-AzAnalysisSer... Script 2.2.0 Az.ApiManagement {Add-AzApiManagementApiToGateway, Add-AzApiManagementApiToProduct, Add-AzApiManagemen... Script 1.1.0 Az.ApplicationInsights {Get-AzApplicationInsights, New-AzApplicationInsights, Remove-AzApplicationInsights, ... Script 3.1.0 Az.Batch {Remove-AzBatchAccount, Get-AzBatchAccount, Get-AzBatchAccountKey, New-AzBatchAccount... Script 2.0.0 Az.Billing {Get-AzBillingInvoice, Get-AzBillingPeriod, Get-AzEnrollmentAccount, Get-AzConsumptio... Script 1.6.0 Az.Cdn {Get-AzCdnProfile, Get-AzCdnProfileSsoUrl, New-AzCdnProfile, Remove-AzCdnProfile...} Script 1.8.0 Az.CognitiveServices {Get-AzCognitiveServicesAccount, Get-AzCognitiveServicesAccountKey, Get-AzCognitiveSe... Script 4.11.0 Az.Compute {Remove-AzAvailabilitySet, Get-AzAvailabilitySet, New-AzAvailabilitySet, Update-AzAva... Script 4.10.0 Az.Compute {Remove-AzAvailabilitySet, Get-AzAvailabilitySet, New-AzAvailabilitySet, Update-AzAva... Script 1.0.3 Az.ContainerInstance {New-AzContainerGroup, Get-AzContainerGroup, Remove-AzContainerGroup, Get-AzContainer... Script 2.2.2 Az.ContainerRegistry {New-AzContainerRegistry, Get-AzContainerRegistry, Update-AzContainerRegistry, Remove... Script 1.1.0 Az.DataBoxEdge {Get-AzDataBoxEdgeJob, Get-AzDataBoxEdgeDevice, Invoke-AzDataBoxEdgeDevice, New-AzDat... Script 1.11.5 Az.DataFactory {Set-AzDataFactoryV2, Update-AzDataFactoryV2, Get-AzDataFactoryV2, Remove-AzDataFacto... Script 1.0.2 Az.DataLakeAnalytics {Get-AzDataLakeAnalyticsDataSource, New-AzDataLakeAnalyticsCatalogCredential, Remove-... Script 1.3.0 Az.DataLakeStore {Get-AzDataLakeStoreTrustedIdProvider, Remove-AzDataLakeStoreTrustedIdProvider, Remov... Script 1.0.0 Az.DataShare {New-AzDataShareAccount, Get-AzDataShareAccount, Remove-AzDataShareAccount, New-AzDat... Script 1.1.0 Az.DeploymentManager {Get-AzDeploymentManagerArtifactSource, New-AzDeploymentManagerArtifactSource, Set-Az... Script 2.0.0 Az.DesktopVirtualization {Disconnect-AzWvdUserSession, Get-AzWvdApplication, Get-AzWvdApplicationGroup, Get-Az... Script 1.0.2 Az.DevTestLabs {Get-AzDtlAllowedVMSizesPolicy, Get-AzDtlAutoShutdownPolicy, Get-AzDtlAutoStartPolicy... Script 1.1.2 Az.Dns {Get-AzDnsRecordSet, New-AzDnsRecordConfig, Remove-AzDnsRecordSet, Set-AzDnsRecordSet... Script 1.3.0 Az.EventGrid {New-AzEventGridTopic, Get-AzEventGridTopic, Set-AzEventGridTopic, New-AzEventGridTop... Script 1.7.2 Az.EventHub {New-AzEventHubNamespace, Get-AzEventHubNamespace, Set-AzEventHubNamespace, Remove-Az... Script 1.7.0 Az.FrontDoor {New-AzFrontDoor, Get-AzFrontDoor, Set-AzFrontDoor, Remove-AzFrontDoor...} Script 2.0.0 Az.Functions {Get-AzFunctionApp, Get-AzFunctionAppAvailableLocation, Get-AzFunctionAppPlan, Get-Az... Script 4.2.1 Az.HDInsight {Get-AzHDInsightJob, New-AzHDInsightSqoopJobDefinition, Wait-AzHDInsightJob, New-AzHD... Script 1.2.0 Az.HealthcareApis {New-AzHealthcareApisService, Remove-AzHealthcareApisService, Set-AzHealthcareApisSer... Script 2.7.2 Az.IotHub {Add-AzIotHubKey, Get-AzIotHubEventHubConsumerGroup, Get-AzIotHubConnectionString, Ge... Script 3.4.0 Az.KeyVault {Add-AzKeyVaultCertificate, Update-AzKeyVaultCertificate, Stop-AzKeyVaultCertificateO... Script 1.0.1 Az.Kusto {Add-AzKustoClusterLanguageExtension, Add-AzKustoDatabasePrincipal, Get-AzKustoAttach... Script 1.5.0 Az.LogicApp {Get-AzIntegrationAccountAgreement, Get-AzIntegrationAccountAssembly, Get-AzIntegrati... Script 1.1.3 Az.MachineLearning {Move-AzMlCommitmentAssociation, Get-AzMlCommitmentAssociation, Get-AzMlCommitmentPla... Script 1.1.0 Az.Maintenance {Get-AzApplyUpdate, Get-AzConfigurationAssignment, Get-AzMaintenanceConfiguration, Ge... Script 0.7.3 Az.ManagedServiceIdentity {New-AzUserAssignedIdentity, Get-AzUserAssignedIdentity, Remove-AzUserAssignedIdentity} Script 2.0.0 Az.ManagedServices {Get-AzManagedServicesAssignment, New-AzManagedServicesAssignment, Remove-AzManagedSe... Script 1.0.2 Az.MarketplaceOrdering {Get-AzMarketplaceTerms, Set-AzMarketplaceTerms} Script 1.1.1 Az.Media {Sync-AzMediaServiceStorageKey, Set-AzMediaServiceKey, Get-AzMediaServiceKey, Get-AzM... Script 2.4.0 Az.Monitor {Get-AzMetricDefinition, Get-AzMetric, Remove-AzLogProfile, Get-AzLogProfile...} Script 4.11.0 Az.Network {Add-AzApplicationGatewayAuthenticationCertificate, Get-AzApplicationGatewayAuthentic... Script 4.6.0 Az.Network {Add-AzApplicationGatewayAuthenticationCertificate, Get-AzApplicationGatewayAuthentic... Script 1.1.1 Az.NotificationHubs {Get-AzNotificationHub, Get-AzNotificationHubAuthorizationRule, Get-AzNotificationHub... Script 2.3.0 Az.OperationalInsights {New-AzOperationalInsightsAzureActivityLogDataSource, New-AzOperationalInsightsCustom... Script 1.4.1 Az.PolicyInsights {Get-AzPolicyEvent, Get-AzPolicyState, Get-AzPolicyStateSummary, Get-AzPolicyRemediat... Script 1.1.2 Az.PowerBIEmbedded {Remove-AzPowerBIWorkspaceCollection, Get-AzPowerBIWorkspaceCollection, Get-AzPowerBI... Script 1.0.3 Az.PrivateDns {Get-AzPrivateDnsZone, Remove-AzPrivateDnsZone, Set-AzPrivateDnsZone, New-AzPrivateDn... Script 3.4.1 Az.RecoveryServices {Get-AzRecoveryServicesBackupProperty, Get-AzRecoveryServicesVault, Get-AzRecoverySer... Script 1.4.0 Az.RedisCache {Remove-AzRedisCachePatchSchedule, New-AzRedisCacheScheduleEntry, Get-AzRedisCachePat... Script 1.0.3 Az.Relay {New-AzRelayNamespace, Get-AzRelayNamespace, Set-AzRelayNamespace, Remove-AzRelayName... Script 3.3.0 Az.Resources {Get-AzProviderOperation, Remove-AzRoleAssignment, Get-AzRoleAssignment, New-AzRoleAs... Script 1.4.1 Az.ServiceBus {New-AzServiceBusNamespace, Get-AzServiceBusNamespace, Set-AzServiceBusNamespace, Rem... Script 2.2.2 Az.ServiceFabric {Add-AzServiceFabricClientCertificate, Add-AzServiceFabricClusterCertificate, Add-AzS... Script 1.2.0 Az.SignalR {New-AzSignalR, Get-AzSignalR, Get-AzSignalRKey, New-AzSignalRKey...} Script 2.16.0 Az.Sql {Get-AzSqlDatabaseTransparentDataEncryption, Get-AzSqlDatabaseTransparentDataEncrypti... Script 1.1.0 Az.SqlVirtualMachine {New-AzSqlVM, Get-AzSqlVM, Update-AzSqlVM, Remove-AzSqlVM...} Script 4.0.2 Az.Storage {Clear-AzRmStorageContainerLegalHold, Close-AzStorageFileHandle, Disable-AzStorageDel... Script 1.4.0 Az.StorageSync {Invoke-AzStorageSyncCompatibilityCheck, New-AzStorageSyncService, Get-AzStorageSyncS... Script 1.0.1 Az.StreamAnalytics {Get-AzStreamAnalyticsFunction, Get-AzStreamAnalyticsDefaultFunctionDefinition, New-A... Script 1.0.0 Az.Support {Get-AzSupportService, Get-AzSupportProblemClassification, Get-AzSupportTicket, Get-A... Script 0.1.1 Az.Tools.Installer {Install-AzModule, Uninstall-AzModule, Update-AzModule} Script 1.0.4 Az.TrafficManager {Add-AzTrafficManagerCustomHeaderToEndpoint, Remove-AzTrafficManagerCustomHeaderFromE... Script 2.4.0 Az.Websites {Get-AzAppServicePlan, Set-AzAppServicePlan, New-AzAppServicePlan, Remove-AzAppServic... Script 5.3.0 Azure {Get-AzureAutomationCertificate, Get-AzureAutomationConnection, New-AzureAutomationCo... Script 5.1.2 Azure {Get-AzureAutomationCertificate, Get-AzureAutomationConnection, New-AzureAutomationCo... Binary 2.0.2.106 AzureAD {Add-AzureADApplicationOwner, Get-AzureADApplication, Get-AzureADApplicationExtension... Binary 2.0.2.52 AzureAD {Add-AzureADApplicationOwner, Get-AzureADApplication, Get-AzureADApplicationExtension... Binary 2.0.2.50 AzureAD {Add-AzureADApplicationOwner, Get-AzureADApplication, Get-AzureADApplicationExtension... Binary 2.0.2.16 AzureAD {Add-AzureADApplicationOwner, Get-AzureADApplication, Get-AzureADApplicationExtension... Binary 2.0.2.4 AzureAD {Add-AzureADApplicationOwner, Get-AzureADApplication, Get-AzureADApplicationExtension... Binary 2.0.0.155 AzureAD {Add-AzureADApplicationOwner, Get-AzureADApplication, Get-AzureADApplicationExtension... Binary 2.0.0.131 AzureAD {Add-AzureADApplicationOwner, Get-AzureADApplication, Get-AzureADApplicationExtension... Script 5.8.3 AzureRM.profile {Disable-AzureRmDataCollection, Disable-AzureRmContextAutosave, Enable-AzureRmDataCol... Script 0.0.6 Connectimo {Connect-WinAzure, Connect-WinAzureAD, Connect-WinConnectivity, Connect-WinExchange...} Script 10.0 Convert-WindowsImage Convert-WindowsImage Script 1.0.0.8 DockerMsftProvider Script 3.0.1 IntuneBackupAndRestore {Invoke-IntuneBackupDeviceConfigurationAssignment, Invoke-IntuneRestoreConfigurationP... Script 2.0.18 IntuneDocumentation {Invoke-ConditionalAccessDocumentation, Invoke-IntuneDocumentation, New-IntuneDocumen... Binary 6.1907.1.0 Microsoft.Graph.Intune {New-AccessActionObject, New-ActivityHistoryItemObject, New-AlertHistoryStateObject, ... Script 1.0.1 Microsoft.PowerShell.Operation.V... {Get-OperationValidation, Invoke-OperationValidation} Binary 1.0.193... Microsoft.RDInfra.RDPowershell {Get-RdsContext, Set-RdsContext, Add-RdsAccount, Get-RdsTenant...} Script 1.0.0.0 Microsoft.SME.CredSspPolicy Script 2.5.0 MSGraphFunctions {Get-GraphGroupPolicyConfiguration, Get-GraphAzureADGroup, Get-GraphDeviceManagementI... Manifest 1.1.183.57 MSOnline {Get-MsolDevice, Remove-MsolDevice, Enable-MsolDevice, Disable-MsolDevice...} Script 0.0.4 MVP {Get-MVPConsiderationAnswer, Get-MVPConsiderationQuestion, Get-MVPContribution, Get-M... Script 1.0.0 OpenSSL {New-PrivateKey, Get-PrivateKey, Convert-PrivateKey, Export-PublicKey...} Script 1.4.6 PackageManagement {Find-Package, Get-Package, Get-PackageProvider, Get-PackageSource...} Script 1.1.4.0 PackageManagement {Find-Package, Get-Package, Get-PackageProvider, Get-PackageSource...} Binary 1.0.0.1 PackageManagement {Find-Package, Get-Package, Get-PackageProvider, Get-PackageSource...} Script 3.4.0 Pester {Describe, Context, It, Should...} Script 2.2.3 PowerShellGet {Find-Command, Find-DSCResource, Find-Module, Find-RoleCapability...} Script 1.1.0 PSIntuneAuth {Get-MSIntuneAuthToken, Set-MSIntuneAdminConsent} Script 2.0.0 PSReadline {Get-PSReadLineKeyHandler, Set-PSReadLineKeyHandler, Remove-PSReadLineKeyHandler, Get... Script 0.0.178 PSSharedGoods {Add-WinADUserGroups, Find-ADConnectServer, Find-ExchangeServer, Find-HyperVServer...} Binary 0.6 PSWord {Add-WordList, Add-WordPicture, Add-WordTable, Add-WordTableofContents...} Script 0.87.2 PSWriteColor {Write-Color, Write-Colour} Script 1.1.8 PSWriteWord {Get-WordBookmark, Set-WordBookmark, New-WordBlock, New-WordBlockList...} Script 1.0.14 SpeculationControl Get-SpeculationControlSettings Script 1.0.0 SpeculationControl Get-SpeculationControlSettings Manifest 2.7 WindowsAutoPilotIntune {Import-AutoPilotCSV, Remove-AutoPilotImportedDevice, ConvertTo-AutoPilotConfiguratio... Manifest 2.0 xHyper-V ```
| Author: | clustermvp |
|---|---|
| Assignees: | - |
| Labels: | `Service Attention`, `question`, `customer-reported`, `needs-triage`, `Network - VPN Gateway` |
| Milestone: | - |
Description
Creating an virtual wan sit to site connection the ipsec policy is not working. also the PfsGroup PFS14 is not available in powershell but is in the gui
Steps to reproduce
$ipsecPolicy = New-AzIpsecPolicy -IkeEncryption AES256 -ikeintegrity SHA256 -DhGroup DHGroup14 -IpsecEncryption AES256 -IpsecIntegrity SHA256 -PfsGroup PFS24 -SALifeTimeSeconds 28800 -Verbose -debug $vpnSiteLinkConnection = New-AzVpnSiteLinkConnection -Name $vpnsitename -VpnSiteLink $vpnSite.VpnSiteLinks[0] -ConnectionBandwidth "200" -SharedKey $Secure_String_Pwd -IpSecPolicy $ipsecPolicy -VpnConnectionProtocolType IKEv2 -EnableBgp -Verbose -debug
$vpnConnection=New-AzVpnConnection -ResourceGroupName $rgName -ParentResourceName $vpnGateway.Name -Name $vpnsitename -VpnSite $vpnSite -VpnSiteLinkConnection @($vpnSiteLinkConnection)
PS C:\Windows\system32> @($vpnSiteLinkConnection)
VpnSiteLink : Microsoft.Azure.Commands.Network.Models.PSVpnSiteLink SharedKey : VpnConnectionProtocolType : ConnectionStatus : EgressBytesTransferred : IngressBytesTransferred : IpsecPolicies : ConnectionBandwidth : 100
Environment data
PS C:\Windows\system32> $PSVersionTable
Name Value
PSVersion 5.1.17763.2090
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.17763.2090
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1