Migrating a VPN Gateway Public IP

Question

Migrating a VPN Gateway Public IP

Flexis Finance 20

I'm getting email alerts from Azure that the Basic SKU Public IP attached to our VPN Gateway service is expiring on 30 Sep 2025.

The messaging is all about upgrading to a Standard SKU Public IP, but my research indicates that this is not actually possible, and that the only solution is to create a new replacement VPN Gateway, that will be based on a Standard SKU Public IP.

Am I correct?

Flexis Finance 20 Reputation points

2025-08-05T19:32:41.7533333+00:00

Thanks, I got an email from Azure yesterday with similar information.

Appreciate the update.

Accepted answer

0 additional answers

Your answer

Flexis Finance 20 Reputation points

2025-08-05T19:32:41.7533333+00:00

Thanks, I got an email from Azure yesterday with similar information.

Appreciate the update.

Answer 1

TP 131.6K Volunteer Moderator

Hi,

What SKU is your current VPN Gateway? This will help me give you more specific advice. The migration procedure that will allow you to upgrade your Public IP to Standard SKU varies depending on your VPN Gateway SKU.

You can view your current VPN Gateway SKU by navigating to it in Azure portal and looking on Overview blade.

1. If your VPN Gateway SKU is Basic, the migration approach for Basic SKU VPN Gateway has not been published. The current timeline is for it to be published by July 30, 2025. There is no action needed yet.

Screenshot excerpt from documentation below:

User's image

2. If your VPN SKU is not Basic, please navigate to your VPN Gateway in the portal, click Settings -- Configuration to see if you have Migrate tab. If you have Migrate tab, please follow instructions in article below:

How to migrate a Basic SKU public IP address to Standard SKU - Preview

https://learn.microsoft.com/en-us/azure/vpn-gateway/basic-public-ip-migrate-howto

If Migrate tab is not there, it means the migration functionality hasn't rolled out to the region yet. Please see article below for more detailed information on timelines:

What's new in Azure VPN Gateway?

https://learn.microsoft.com/en-us/azure/vpn-gateway/whats-new#upcoming-projected-changes

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP

Flexis Finance 20 Reputation points

2025-07-17T18:52:23.8866667+00:00

Thanks TP, very helpful.

Our VPN Gateway SKU is Basic.

So I wait until end of July, and then I should find a migration pathway under the VNG resource?

And nothing actually stops working until end of Jan 2026?
TP 131.6K Reputation points Volunteer Moderator

2025-07-17T19:03:14.7+00:00

So I wait until end of July, and then I should find a migration pathway under the VNG resource? And nothing actually stops working until end of Jan 2026?

Correct, that is the current timeline. It is subject to change of course. For example, you might get to end of July and find that timeline is updated to say the migration path won't be available until end of August or something.
Flexis Finance 20 Reputation points

2025-07-17T22:13:51.2466667+00:00

Cheers, appreciated.
Flexis Finance 20 Reputation points

2025-08-01T01:46:54.0966667+00:00

End of July has passed, and the timeline has not yet changed:

https://learn.microsoft.com/en-us/azure/vpn-gateway/whats-new#upcoming-projected-changes

Does that mean the migration tool is now available? I'm not seeing it in the Azure portal.

Virtual Network Gateway resource page: Still no obvious migration pathway

Associated Public IP resource page: Still seeing migration message, but when clicked it says "Your public IP is currently associated with a resource or has a dynamic allocation method. Please make sure that the public IP is not associated with a resource and has static allocation method before trying again."
TP 131.6K Reputation points Volunteer Moderator

2025-08-01T03:44:11.8333333+00:00

No announcement yet. I'm monitoring the timeline page as well as the Azure updates page.

The deadline is end of January 2026 to upgrade Basic SKU IP (when used with VPN Gateway) so there is still time.
TP 131.6K Reputation points Volunteer Moderator

2025-08-05T16:50:51.85+00:00
The latest update published today states, in regards to Basic SKU VPN Gateway:

Your actual IP address will not change, and connectivity will not be interrupted.

An automated capability to remove the Basic public IP from your gateway will be available in Sept/Oct 2025

Deprecation timeline of Basic IP for all VPN Gateways is moved from Sep 2025 to end of Jan 2026

Because Microsoft is retiring Basic public IP resources, we’re updating the Basic VPN Gateway construct. You’ll see the Basic public IP reference as an attribute on your virtual network gateway.

If you have scripts, ARM templates, or monitoring solutions that reference the Basic public IP resource, update them to use the IP address property of the virtual network gateway instead.

No action needed. I just wanted to give you latest update.
Flexis Finance 20 Reputation points

2025-08-05T19:34:53.5366667+00:00

Thanks, I got a notification from Azure yesterday with similar info.

Appreciate the update.

Share via

Migrating a VPN Gateway Public IP

0 additional answers

Your answer