Azure Landing Zones Documentation
Home GitHub Issue Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage

6 - Turn off Virtual Network Gateways

You can choose to not deploy Virtual Network Gateways. In order to do that, you need to update the Virtual Network Gateway configuration.

For ExpressRoute Virtual Network Gateways

The steps to follow are:

  1. Update the following settings by searching for the keys and updating the value

    Setting TypeParent block(s)KeyActionCountNotes
    linecustom_replacements > namesenabledUpdate setting to <region>_virtual_network_gateway_express_route_enabled1+<region> is the relevant region (e.g. primary)
    You should not remove the ExpressRoute Gateway names from the custom_replacements section as it will result in a templating error. Advanced Terraform users are welcome to tidy up the config and remove the names and related templates if there is no future plan to use an ExpressRoute Gateway.

For VPN Virtual Network Gateways

The steps to follow are:

  1. Update the following settings by searching for the keys and updating the value

    Setting TypeParent block(s)KeyActionCountNotes
    linecustom_replacements > names<region>_virtual_network_gateway_vpn_enabledUpdate setting to false1+<region> is the relevant region (e.g. primary)
    You should not remove the VPN Gateway names from the custom_replacements section as it will result in a templating error. Advanced Terraform users are welcome to tidy up the config and remove the names and related templates if there is no future plan to use a VPN Gateway.