I'm trying to use an Azure Gateway with the Azure AD.
I've managed to configure the gateway and connect to it using the Azure VPN profile and the Azure VPN client, however I need to configure the VPN in other devices and need the ovpn file that should come in the client profile download. When I do the New-AzVpnClientConfiguration -Name xxx -ResourceGroupName xxx -AuthenticationMethod "EapTls", the zip file only contains and AzureVPN folder and a Generic folder and no OpenVPN folder so I'm finding it very hard to configure the VPN in devices where the Azure VPN client is not available.
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.
@jorgemrsantos , did you enable open vpn in your vpn configuration via portal?
Yes, if I try to enable “simple” open vpn through the portal, the profile comes with the ovpn file but when I configure the AAD option doesnt
Can you do a Get-AzVirtualnetworkGateway -ResourceGroupName RGname -Name Gatewayname and check whether your VPN gateway is configured with OpenVPN under VpnClientConfiguration ?
@jorgemrsantos , Do you have any update for me?
@jorgemrsantos , Please tag me if you have any further questions.
I have the same issue the downloaded zip does not contain any ovpn configuration file there are an Azure VPN and a generic folder. The generic folder contains a VpnServerRoot.cer and VpnSettings.xml files.
Here is the gateway type.
}
VpnClientConfiguration : {
"VpnClientProtocols": [
"OpenVPN"
],
I'm not sure why this issue has ben closed. I confirm that when you select AAD as Authentication type in the P2S configuration, you won't have any OpenVPN profile to downlaod.
Does it means everything else than Windows 10 is supported with AAD auth? If yes, I suggest you make it clear in the documentation please.
As per the public documentation
Native Azure AD authentication is only supported for OpenVPN protocol and Windows 10 and requires the use of the Azure VPN Client.
https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about
When configuring the Azure VPN Client, you need to use the XML file (not the ovpn) as described in the config article
https://docs.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-client
For this reason, as stated in another article too the ovpn files will NOT be included in the package
The OpenVPN folder contains the ovpn profile that needs to be modified to include the key and the certificate. (..)
This folder will not be present in the zip file if Azure AD authentication is selected on the VPN gateway. Instead, the azurevpnconfig.xml will be in the AzureVPN folder.
https://docs.microsoft.com/en-us/azure/vpn-gateway/about-vpn-profile-download
This page should be updated, according to Azure documentation ovpn only works using Windows 10. But this page doesn't reflect that, it's confusing