Need to replace VPN SKU VpnGw2AZ with a Basic VPN to manage costs

Hi Ron,

Q1: What is the best method to replace the current VPN Gateway?

A: You can't scale down the existing VPN gateway to Basic, so you will need to delete it and then create new Basic SKU gateway. This will involve some downtime since it takes time to delete existing gateway, create new gateway, re-configure your on premises VPN, etc.

Q2: Should the fact that the Basic VPN gateway only allows Dynamic (not Static) Public IP address be a concern?

A: No. The public IP will stay the same until you delete the gateway. Excerpt from VPN Gateway FAQ:

... When you use a dynamic IP address, the IP address doesn't change after it's assigned to your VPN gateway. The only time that the VPN gateway IP address changes is when the gateway is deleted and then re-created. The public IP address doesn't change when you resize, reset, or complete other internal maintenance and upgrades of your VPN gateway.

Q3: I see mention that Basic VPN gateway Public IP are EOL effective September 2025 - what does this mean?

A: Basic SKU Public IP address is ending September 2025, so you will need to switch the VPN Gateway to Standard SKU before then. They will announce instructions on how to switch to Standard SKU Public IP as soon as the ability to do so is ready.

https://zcusa.951200.xyz/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq#how-does-the-retirement-of-basic-sku-public-ip-addresses-affect-my-vpn-gateways

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP