Skip to content

Commit 44919df

Browse files
Merge pull request #127636 from AMcVicker/patch-4
Update vpn-gateway-p2s-advertise-custom-routes.md
2 parents 98af94f + 0b33fb0 commit 44919df

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

articles/vpn-gateway/vpn-gateway-p2s-advertise-custom-routes.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.custom:
1515

1616
# Advertise custom routes for P2S VPN clients
1717

18-
You may want to advertise custom routes to all of your point-to-site VPN clients. For example, when you have enabled storage endpoints in your VNet and want the remote users to be able to access these storage accounts over the VPN connection. You can advertise the IP address of the storage end point to all your remote users so that the traffic to the storage account goes over the VPN tunnel, and not the public Internet. You can also use custom routes in order to configure [forced tunneling](#forced-tunneling) for VPN clients.
18+
You may want to advertise custom routes to all of your point-to-site VPN clients. For example, when you have enabled storage endpoints in your VNet and want the remote users to be able to access these storage accounts over the VPN connection. You can advertise the IP address of the storage endpoint to all your remote users so that the traffic to the storage account goes over the VPN tunnel, and not the public internet. You can also use custom routes in order to configure [forced tunneling](#forced-tunneling) for VPN clients.
1919

2020
:::image type="content" source="./media/vpn-gateway-p2s-advertise-custom-routes/custom-routes.png" alt-text="Diagram of advertising custom routes." lightbox="./media/vpn-gateway-p2s-advertise-custom-routes/custom-routes.png":::
2121

@@ -75,7 +75,7 @@ Use the following example to delete custom routes:
7575
You can direct all traffic to the VPN tunnel by advertising 0.0.0.0/1 and 128.0.0.0/1 as custom routes to the clients. The reason for breaking 0.0.0.0/0 into two smaller subnets is that these smaller prefixes are more specific than the default route that may already be configured on the local network adapter and, as such, will be preferred when routing traffic.
7676

7777
> [!NOTE]
78-
> Internet connectivity is not provided through the VPN gateway. As a result, all traffic bound for the Internet is dropped.
78+
> Internet connectivity is not provided through the VPN gateway. As a result, all traffic bound for the internet is dropped.
7979
>
8080
8181
To enable forced tunneling, use the following commands:

0 commit comments

Comments
 (0)