New-AzVirtualNetworkGateway

New-AzVirtualNetworkGateway
    -Name <String>
    -ResourceGroupName <String>
    -Location <String>
    [-IpConfigurations <PSVirtualNetworkGatewayIpConfiguration[]>]
    [-GatewayType <String>]
    [-ExtendedLocation <String>]
    [-VNetExtendedLocationResourceId <String>]
    [-VpnType <String>]
    [-EnableBgp <Boolean>]
    [-DisableIPsecProtection <Boolean>]
    [-EnableActiveActiveFeature]
    [-EnableAdvancedConnectivityFeature]
    [-EnablePrivateIpAddress]
    [-GatewaySku <String>]
    [-GatewayDefaultSite <PSLocalNetworkGateway>]
    [-VpnClientAddressPool <String[]>]
    [-VpnClientProtocol <String[]>]
    [-VpnAuthenticationType <String[]>]
    [-VpnClientRootCertificates <PSVpnClientRootCertificate[]>]
    [-VpnClientRevokedCertificates <PSVpnClientRevokedCertificate[]>]
    [-VpnClientIpsecPolicy <PSIpsecPolicy[]>]
    [-Asn <UInt32>]
    [-PeerWeight <Int32>]
    [-IpConfigurationBgpPeeringAddresses <PSIpConfigurationBgpPeeringAddress[]>]
    [-NatRule <PSVirtualNetworkGatewayNatRule[]>]
    [-EnableBgpRouteTranslationForNat]
    [-Tag <Hashtable>]
    [-Force]
    [-RadiusServerAddress <String>]
    [-RadiusServerSecret <SecureString>]
    [-RadiusServerList <PSRadiusServer[]>]
    [-AadTenantUri <String>]
    [-AadAudienceId <String>]
    [-AadIssuerUri <String>]
    [-CustomRoute <String[]>]
    [-VpnGatewayGeneration <String>]
    [-VirtualNetworkGatewayPolicyGroup <PSVirtualNetworkGatewayPolicyGroup[]>]
    [-ClientConnectionConfiguration <PSClientConnectionConfiguration[]>]
    [-AsJob]
    [-AdminState <String>]
    [-ResiliencyModel <String>]
    [-MinScaleUnit <Int32>]
    [-MaxScaleUnit <Int32>]
    [-DefaultProfile <IAzureContextContainer>]
    [-WhatIf]
    [-Confirm]
    [<CommonParameters>]

虚拟网络网关是表示 Azure 中网关的对象。 New-AzVirtualNetworkGateway cmdlet 基于名称、资源组名称、位置和 IP 配置以及网关类型和 VPN（如果为 VPN）在 Azure 中创建网关的对象。 还可以命名网关 SKU。 如果此网关用于点到站点连接，则还需要包括 VPN 客户端地址池，从中分配用于连接客户端的地址以及用于对连接到网关的 VPN 客户端进行身份验证的 VPN 客户端根证书。 还可以选择包括其他功能，例如 BGP 和 Active-Active。

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "Basic" -CustomRoute 192.168.0.0/24

上述作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网并在 Azure 中创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”，位置为“UK West”，其以前创建的 IP 配置保存在变量“ngwIPConfig”中，网关类型为“VPN”，VPN 类型为“RouteBased”，SKU 为“Basic”。

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id
$Secure_String_Pwd = ConvertTo-SecureString -String "****" -AsPlainText -Force

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "Basic" -RadiusServerAddress "TestRadiusServer" -RadiusServerSecret $Secure_String_Pwd -CustomRoute 192.168.0.0/24

上述作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网并在 Azure 中创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”，位置为“UK West”，其以前创建的 IP 配置保存在变量“ngwIPConfig”中，网关类型为“VPN”，VPN 类型为“RouteBased”，SKU 为“Basic”。它还添加地址为“TestRadiusServer”的外部半径服务器。 它还会在网关上设置客户指定的自定义路由。

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id
$rootCert = New-AzVpnClientRootCertificate -Name $clientRootCertName -PublicCertData $samplePublicCertData
$vpnclientipsecpolicy = New-AzVpnClientIpsecPolicy -IpsecEncryption AES256 -IpsecIntegrity SHA256 -SALifeTime 86471 -SADataSize 429496 -IkeEncryption AES256 -IkeIntegrity SHA384 -DhGroup DHGroup2 -PfsGroup PFS2

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw1" -VpnClientProtocol IkeV2 -VpnClientAddressPool 201.169.0.0/16 -VpnClientRootCertificates $rootCert -VpnClientIpsecPolicy $vpnclientipsecpolicy -CustomRoute 192.168.0.0/24

上述作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网，并使用 P2S 设置创建虚拟网络网关，例如 VpnProtocol、VpnClientAddressPool、VpnClientRootCertificates、VpnClientIpsecPolicy 等。 网关将在资源组“vnet-gateway”中称为“myNGW”，位置为“UK West”，其以前创建的 IP 配置保存在变量“ngwIPConfig”中，网关类型为“VPN”，VPN 类型为“RouteBased”，SKU 为“VpnGw1”。Vpn 设置将在网关上设置，例如 VpnProtocol 设置为 Ikev2，VpnClientAddressPool 设置为“201.169.0.0/16”，VpnClientRootCertificate 设置为传递一个：clientRootCertName 和传入对象：$vpnclientipsecpolicy 它还会在网关上设置客户指定的自定义路由。

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id
$Secure_String_Pwd = ConvertTo-SecureString -String "****" -AsPlainText -Force

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw1" -VpnClientProtocol OpenVPN   -VpnClientAddressPool 201.169.0.0/16 -AadTenantUri "https://login.microsoftonline.com/0ab2c4f4-81e6-44cc-a0b2-b3a47a1443f4" -AadIssuerUri "https://sts.windows.net/0ab2c4f4-81e6-44cc-a0b2-b3a47a1443f4/" -AadAudienceId "a21fce82-76af-45e6-8583-a08cb3b956f9"

上述作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网并在 Azure 中创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”，位置为“UK West”，其以前创建的 IP 配置保存在变量“ngwIPConfig”中，网关类型为“VPN”，VPN 类型为“RouteBased”，SKU 为“Basic”。它还配置 AAD 身份验证配置：虚拟网络网关 VpnClient 的 AadTenantUri、AadIssuerUri 和 AadAudienceId。

New-AzResourceGroup -Location "UK West" -Name "vnet-gateway"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "vnet-gateway" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "vnet-gateway" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ngwipconfig -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

New-AzVirtualNetworkGateway -Name myNGW -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig  -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw4" -VpnGatewayGeneration "Generation2"

上述作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网并在 Azure 中创建虚拟网络网关。 网关将在资源组“vnet-gateway”中称为“myNGW”，其位置为“UK West”，其以前创建的 IP 配置保存在变量“ngwIPConfig”中，网关类型为“VPN”，VPN 类型为“RouteBased”，SKU“VpnGw4”和 VpnGatewayGeneration Generation2 已启用。

New-AzResourceGroup -Location "UK West" -Name "resourcegroup1"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "resourcegroup1" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "resourcegroup1" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ipconfig1 -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

$ipconfigurationId1 = $ngwipconfig.Id
$addresslist1 = @('169.254.21.10')
$gw1ipconfBgp1 = New-AzIpConfigurationBgpPeeringAddressObject -IpConfigurationId $ipconfigurationId1 -CustomAddress $addresslist1

New-AzVirtualNetworkGateway -Name gateway1 -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig -IpConfigurationBgpPeeringAddresses $gw1ipconfBgp1 -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw4" -VpnGatewayGeneration "Generation2"

上述作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网并在 Azure 中创建虚拟网络网关。 网关 ipconfigurationId1 刚刚创建并存储在 ngwipconfig 中。 网关将在资源组“resourcegroup1resourcegroup1”内名为“gateway1”，该位置为“UK West”，其以前创建的 IP 配置 Bgppeering 地址保存在变量“gw1ipconfBgp1”中，网关类型为“VPN”，VPN 类型为“RouteBased”，SKU“VpnGw4”和 VpnGatewayGeneration Generation Generation2 已启用。

New-AzResourceGroup -Location "UK West" -Name "resourcegroup1"
$subnet = New-AzVirtualNetworkSubnetConfig -Name 'gatewaysubnet' -AddressPrefix '10.254.0.0/27'

$ngwpip = New-AzPublicIpAddress -Name ngwpip -ResourceGroupName "resourcegroup1" -Location "UK West" -AllocationMethod Dynamic
$vnet = New-AzVirtualNetwork -AddressPrefix "10.254.0.0/27" -Location "UK West" -Name vnet-gateway -ResourceGroupName "resourcegroup1" -Subnet $subnet
$subnet = Get-AzVirtualNetworkSubnetConfig -name 'gatewaysubnet' -VirtualNetwork $vnet
$ngwipconfig = New-AzVirtualNetworkGatewayIpConfig -Name ipconfig1 -SubnetId $subnet.Id -PublicIpAddressId $ngwpip.Id

$natRule = New-AzVirtualNetworkGatewayNatRule -Name "natRule1" -Type "Static" -Mode "IngressSnat" -InternalMapping @("25.0.0.0/16") -ExternalMapping @("30.0.0.0/16")

New-AzVirtualNetworkGateway -Name gateway1 -ResourceGroupName vnet-gateway -Location "UK West" -IpConfigurations $ngwIpConfig -GatewayType "Vpn" -VpnType "RouteBased" -GatewaySku "VpnGw4" -VpnGatewayGeneration "Generation2" -NatRule $natRule -EnableBgpRouteTranslationForNat

上述作将创建资源组、请求公共 IP 地址、创建虚拟网络和子网并在 Azure 中创建虚拟网络网关。 网关 ipconfigurationId1 刚刚创建并存储在 ngwipconfig 中。 网关将在资源组“resourcegroup1resourcegroup1”中名为“gateway1”，位于“UK West”新 virtualNetworkGateway NatRule 的位置中，将保存在变量“natRule”中，网关类型为“VPN”，vpn 类型为“RouteBased”，SKU“VpnGw4”和 VpnGatewayGeneration Generation2 已启用，并且已启用 BgpRouteTranslationForNat。

此 cmdlet 支持通用参数：-Debug、-ErrorAction、-ErrorVariable、-InformationAction、-InformationVariable、-OutBuffer、-OutVariable、-PipelineVariable、-ProgressAction、-Verbose、-WarningAction 和 -WarningVariable。 有关详细信息，请参阅 about_CommonParameters。