Within Azure, can a single virtual network have two gateways, one for devices that are policy based, and the other for route based? If so, how?

As to why I'm asking: I need to connect a legacy network in a hosted data center that only provides a Cisco VPN tunnel that is static only. Now I can't do vnet to vnet connections.

This should be basic, but I'm having a heck of a time finding the answer.

  • AFAIK you can't have multiple gateways and you can only do multi site with dynamic gateways. It might be something that is coming in the new Resource Manager portal or via new PS commands but not as yet – Drifter104 Mar 23 '16 at 16:35

As Drifter104 mention, you can connect multiple sites to the same VNet, but only through the same gateway (see here), you can't have multiple gateways on a single VNET. This is true currently both in Classic and ARM deployments.


Although this isn't an answer to the general use case there is a way to set up Azure to Azure VPN links which don't require the dynamic route based functionality.

  1. Define the two virtual network gateways using the policy based option.
  2. Define the two 'local network gateways' using the same IP addresses / names as the virtual gateways above.
  3. Define the connections using the site-to-site (ipsec) options.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.