Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CLI for VNG : p2s multiple authentication #17260

Closed
neethirshetty opened this issue Mar 10, 2021 · 2 comments
Closed

CLI for VNG : p2s multiple authentication #17260

neethirshetty opened this issue Mar 10, 2021 · 2 comments
Assignees
Labels
feature-request Network az network vnet/lb/nic/dns/etc...
Milestone

Comments

@neethirshetty
Copy link

neethirshetty commented Mar 10, 2021

Is your feature request related to a problem? Please describe.
P2S multiple authentication feature has been released. Hence we will need to add CLI support to it.
previously we were allowed to set only single authentication for P2S VNG. Support for multiple authentication has to be added.

Describe the solution you'd like

Brief about multi auth: . A point-to-site (P2S) VPN lets you create a secure connection to your VNG from an individual client computer. there are 3 auth types allowed: radius/AAD/Certificate. Previously we used to support setting only one of these auth types. But with multi auth we need to allow setting multiple auth parameters at a time.

Describe alternatives you've considered

CLI is needed for this as this feature is already released.

Additional context

Please contact me neethir@microsoft.com if there is any questions on Point to site multi- auth feature CLI request.
SWAGGER PR: Azure/azure-rest-api-specs#13183
Powershell PR: Azure/azure-powershell#14441 (comment)

Commands eg:
(newly added property is highlighted)
New-AzVirtualNetworkGateway -ResourceGroupName $rgname -name $rname -location $location -IpConfigurations $vnetIpConfig -GatewayType Vpn -VpnType RouteBased -EnableBgp $false -GatewaySku VpnGw2 -VpnClientAddressPool 201.169.0.0/16 -VpnAuthenticationType Certificate,Radius,AAD -RadiusServerAddress "1.2.3.4" -RadiusServerSecret $Secure_String_Pwd -VpnClientRootCertificates $rootCert -AadTenantUri $aadTenant -AadAudienceId $aadAudience -AadIssuerUri $aadIssuer -VpnClientProtocol OpenVPN

OR
Set-AzVirtualNetworkGateway -VirtualNetworkGateway $gate -VpnAuthenticationType Certificate,Radius,AAD -RadiusServerAddress "1.2.3.4" -RadiusServerSecret $Secure_String_Pwd -VpnClientRootCertificates $rootCert -AadTenantUri $aadTenant -AadAudienceId $aadAudience -AadIssuerUri $aadIssuer

@ghost ghost added the needs-triage This is a new issue that needs to be triaged to the appropriate team. label Mar 10, 2021
@yonzhan yonzhan added the Network az network vnet/lb/nic/dns/etc... label Mar 10, 2021
@ghost ghost removed the needs-triage This is a new issue that needs to be triaged to the appropriate team. label Mar 10, 2021
@yonzhan yonzhan added this to the S185 milestone Mar 10, 2021
@yonzhan
Copy link
Collaborator

yonzhan commented Mar 10, 2021

network

@msyyc
Copy link
Member

msyyc commented Apr 6, 2021

PR has been merged, new version 2.22.0 of azure-cli will be released soon.

@msyyc msyyc closed this as completed Apr 6, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request Network az network vnet/lb/nic/dns/etc...
Projects
None yet
Development

No branches or pull requests

3 participants