无法为现有虚拟网络创建网关
我在 Azure 中有一个 VNET，我正在尝试为此创建一个新的虚拟网络网关。这样，我就可以将此虚拟网络与 Azure Function App 结合使用。
在创建过程中，我收到以下错误：
虚拟网络已具有此类型的网关或虚拟网络中的现有网关不支持共存
I have a VNET in Azure and I'm trying to create a new Virtual Network Gateway for this. So that, I can use this Virtual Network with Azure Function App.
During the creation, I'm getting the below error:
The Virtual network already has a gateway of this type or the existing gateway in the virtual network does not support coexistence
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我在尝试创建 Azure VPN 网关时收到了相同的错误消息。问题是我还没有创建 GatewaySubnet。
我的解决方案是首先创建 GatewaySubnet，然后 Azure 门户允许我创建 Azure VPN 网关实例。
在此处输入图片说明
I received the same error message when trying to create an Azure VPN Gateway. The problem was that I had not yet created the GatewaySubnet.
The solution for me was to create the GatewaySubnet first, Then the Azure portal allowed me to create the Azure VPN Gateway instance.
enter image description here
• 根据微软官方文档，网关子网大小应至少为'/27'或更大，即/27、/26、/25、/24等。它可以容纳32个或更多IP地址。在您的情况下，已在您部署的虚拟网络中创建的虚拟网关的子网大小小于之前指定的子网大小。另外，请检查您是否已经创建了上述 IP 地址配置的'GatewaySubnet'。如果没有剩余的 IP 地址空间来容纳 VNET 网关，那么您可能必须相应地添加一个。
• 该错误还意味着VPN 网关可能已存在，但不支持与您尝试配置的网关（即快速路由IPv6 网关和双堆栈快速路由网关）共存。另外，请检查是否为已部署为网关子网 NSG 的网关子网配置了任何网络安全组，应避免这样做。
• 请检查除此虚拟网络网关之外配置的VPN 网关的ASN（自治系统编号），是否为65515。它应该是 65515。
我还尝试创建一个虚拟网关，如下面的快照所示，但没有收到您遇到的错误。
更多详细信息，请参考以下有关VPN网关共存和创建虚拟网络网关的官方文档链接：-
https://learn.microsoft.com/ en-us/azure/expressroute/expressroute-howto-coexist-resource-manager#add
• According to official Microsoft documentation, the gateway subnet size should be atleast ‘/27’ or bigger, i.e., /27, /26, /25, /24 etc. which can accommodate 32 or more IP addresses. In your case, the subnet size for the Virtual network gateway which is already created in the virtual network that you have deployed is lesser than the one specified earlier. Also, please check whether you have already created a ‘GatewaySubnet’ of the said IP address configuration or not. And if there are no IP address spaces left to accommodate the VNET gateway, then you might have to add one accordingly.
• The error also means that a VPN gateway might be in existence already which doesn’t support co-existence with the one that you are trying to configure, i.e., a Express route IPv6 gateway and a dual stack express route gateway. Also, please check whether any Network Security Group is configured for the gateway subnet that is already deployed as NSG for the gateway subnet should be avoided.
• Please check the ASN (Autonomous System Number) of the VPN Gateway configured other than for this virtual network gateway, if it is 65515 or not. It should be 65515.
I also tried to create a virtual network gateway as you as shown below in the snapshot and didn’t receive the error faced by you.
For more details, please refer to the below official documentation link regarding VPN Gateway co-existence and creation of virtual network gateway: -
https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager#add