Is it possible to downgrade the SKU on-the-fly for the Azure VPN Gateway after deployment anytime?

Hey @Rajesh Swarnkar,

It sounds like you're looking to downgrade the SKU of your Azure VPN Gateway after deployment. Unfortunately, downgrading a VPN Gateway SKU isn't as straightforward as upgrading. Here's what you need to know:

1. Downgrades Not Allowed On-the-Fly: You cannot downgrade the SKU from, for example, VpnGw4AZ to VpnGw2AZ or VpnGw2 without performing a deletion and creation of the gateway. The Azure infrastructure does not support on-the-fly downgrades.
2. Process:
   • Delete the existing VPN Gateway: Before creating a new one, you need to remove any existing connections to the current gateway.
   • Create a new VPN Gateway: After deletion, you can create a new VPN gateway with the desired SKU.
   • Public IP Change: Keep in mind that this process will change the public IP address assigned to your new gateway, and you'll have to reconfigure your VPN settings accordingly.

This process does incur downtime, so you'll want to plan for that during a maintenance window. Here’s a brief overview of the steps you’ll take:

1. Remove connections to the virtual network gateway.
2. Delete the old VPN gateway.
3. Create the new VPN gateway with the desired SKU.
4. Update any configurations for your VPN devices and clients as needed.

For more detailed instructions on upgrading and downgrading VPN Gateway SKUs, check out the following resources:

• Upgrade a VPN Gateway SKU
• VPN Gateway FAQ
• Working with VPN Gateway legacy SKUs

Hope this helps you with your Azure VPN setup! If you have any more questions or need clarification, feel free to ask.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".