Virtual Network Gateway IPV6 support

Allan Guerreiro 0

Since Azure Virtual Network Gateway does not support IPv6, what would be an alternative solution to establish a Point-to-Site (AOVPN) VPN using IPv6?

Additionally, what would be an alternative solution using NAT64?

Please provide me with both scenarios.

Thanks

Sai Prasanna Sinde 3,845 Reputation points Microsoft Vendor

2025-02-17T08:35:52.7966667+00:00
Hi @Allan Guerreiro

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Yes, the Basic SKU has limitations and does not support IKEv2, IPv6, or RADIUS authentication

The general recommended approach is VPN Gateway with an NVA:

In your Azure Virtual Network, deploy a NVA from a vendor that offers VPN solutions with IPv6 support. Many vendors like Cisco, Fortinet, etc., offer NVAs in the Azure Marketplace. Ensure the NVA specifically states it supports IPv6 for VPN connections.

Configure the NVA as your Point-to-Site VPN gateway. This involves setting up the VPN server on the NVA, configuring authentication, and defining the IPv6 address pools for your clients. You'll typically use IKEv2 or OpenVPN protocols, as these are more likely to support IPv6.

Configure UDRs in your Azure Virtual Network to direct traffic destined for your on-premises network (or wherever your IPv6 resources are) through the NVA. This is crucial for ensuring traffic from your P2S clients is correctly routed. Please refer the document.

Install the appropriate VPN client software on your client devices and configure it to connect to the NVA's VPN endpoint using IPv6. The NVA vendor will provide instructions and often client software for this.

We think the NAT64 is technically possible, but it involves complexity and limitations, like Client complexity, application compatibility, performance and by using NAT64 you might get connectivity, but you will not get end-to-end IPv6. This can limit the benefits of IPv6.

Kindly let us know if the above helps or you need further assistance on this issue.
Sai Prasanna Sinde 3,845 Reputation points Microsoft Vendor

2025-02-18T08:01:22.1666667+00:00

Hi @Allan Guerreiro

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If you are still facing any further issues, please let us know in the comments below so that we can address them.
Allan Guerreiro 0 Reputation points

2025-02-18T13:17:53.2633333+00:00

Hi @Sai Prasanna Sinde I saw your reply, thank you so much.

But I'm not totally happy because I hoped that Microsoft had some solution natively to support the IPv6.

NAT64 is very complicated to be deployed and sometimes during a problem can bring a long time of downtime until be fixed.

A third-party solution is also not so good because we already have an infrastructure deployed with Azure resources.
Allan Guerreiro 0 Reputation points

2025-02-19T13:28:58.29+00:00

Thank you @Sai Prasanna Sinde

I posted here:
https://feedback.azure.com/d365community/idea/efe84a56-c5ee-ef11-a4de-000d3a02e56c
Allan Guerreiro 0 Reputation points

2025-02-19T13:34:13.47+00:00

Thank you @Sai Prasanna Sinde

I posted here: https://feedback.azure.com/d365community/idea/efe84a56-c5ee-ef11-a4de-000d3a02e56c
Sai Prasanna Sinde 3,845 Reputation points Microsoft Vendor

2025-02-19T13:39:37.8666667+00:00

Hi @Allan Guerreiro

Glad we could be of help.

Meanwhile can you please close this thread by clicking 'Accept answer' if the provided solution is helpful. Please let us know in the comments below if you have any further questions so that we can address them.

1 answer

Sai Prasanna Sinde 3,845 Reputation points Microsoft Vendor

2025-02-19T10:35:32.7966667+00:00

Hi @Allan Guerreiro

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

As mentioned in the Ms document, currently VPN gateways currently support IPv4 traffic only, but they still can be deployed in a dual-stacked virtual network using Azure PowerShell and Azure CLI commands only.

If you wish, you may also leave your feedback in the below forum requesting this feature. All the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.

https://feedback.azure.com/d365community/forum/8ae9bf04-8326-ec11-b6e6-000d3a4f0789

Your feedback is important so please take a moment to accept answers.

If you still have questions, please let us know what is needed in the comments so the question can be answered.

Thank you for helping to improve Microsoft Q&A!
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Virtual Network Gateway IPV6 support

1 answer

Your answer