Configuration Workflow
Before you begin, ensure you have the latest Controller software.- In Aviatrix CoPilot, go to Cloud Fabric > Gateways > Specialty Gateways tab. From + Gateway dropdown menu, select Other, then create a gateway.
- At the Azure portal, go to the Virtual network gateways page. Fill in the following information to create a new Virtual Network Gateway:
| Name | Description |
|---|---|
| Name | Enter a name for the Azure VPN gateway (for example, Azure-VPN-GW). |
| Gateway type | VPN |
| VPN type | Policy-based |
| SKU | Basic |
| Location | Select a desired location. |
| Virtual network | Select a desired VNet. |
Azure is deprecating the Basic Load Balancer in September 2025. You can migrate to the Standard SKU Load Balancer.
- Once the virtual network gateway is provisioned, record its Public IP address.
- In Aviatrix CoPilot, create a Static Policy-Based (Unmapped) external connection.
- Once the Site2Cloud connection is created, locate the same connection on the External Connections (S2C) page.
-
Click the vertical ellipsis
icon and select Download Configuration.
-
The Download Configuration dialog displays. Select the following values for each specific
field:
- Vendor: Generic
- Platform: Generic
- Software: Vendor Independent
- Click Download.
- Collect the following information from the downloaded configuration template:
| Pre-Shared Key from #1 | Internet Key Exchange Configuration |
|---|---|
| Aviatrix Gateway Public IP from #3 | Tunnel Interface Configuration |
| Cloud Network(s) from the Subnets section of #3 | Tunnel Interface Configuration |
- At the Azure portal, go to the Local network gateways page. Enter the following information to create a local network gateway:
| Name | Description |
|---|---|
| Name | Enter a local gateway name (e.g. AVX-GW) |
| IP address | Enter the Aviatrix Gateway’s public IP collected at Step 6 |
| Address space | Enter the “Cloud Network” CIDR collected at Step 6 |
| Configure BGP settings | Unmark this checkbox |
- At Azure portal, go to Virtual network gateways page and select the gateway created at Step 2.
- Select Connections from Settings. Enter the following information to create a connection:
| Name | Description |
|---|---|
| Name | Enter a VPN connection name (e.g. Azure-AVX-S2C) |
| Connection type | Select Site-to-site (IPsec) |
| Virtual network gateway | Select the VPN gateway created at Step 2 |
| Local network gateway | Select the local gateway created at Step 7 |
| Shared key (PSK) | Enter the pre-shared key collected at Step 6 |