We received an email from Microsoft Azure requesting us to update our Basic SKU VPN Gateway configurations before 30 June 2026.
While reviewing our setup, we noticed that our Public IP address (WebServer-ip) is still on Basic SKU. We understand that we need to upgrade it to Standard SKU before updating the VPN Gateway configuration.
Our concern is that we need to retain the same Public IP address after the upgrade, as we have multiple internal websites hosted on this server that are publicly accessed by users. Changing the IP address would cause disruption to all those sites.
Could you please advise:
- Is it possible to upgrade from Basic SKU to Standard SKU while keeping the same Public IP address?
- What is the safest method to do this without causing downtime or IP change — via Azure Portal or PowerShell?
- Should we upgrade the Public IP SKU first before updating the VPN Gateway configuration?
Any guidance would be greatly appreciated.
-
Ravi Varma Mudduluru 12,370 Reputation points • Microsoft External Staff • Moderator
Hello @Marimuthu G
Thank you for contacting us about the VPN gateway issue. We have begun looking into it and will share our suggestions with you as soon as possible.
Sign in to comment
2 answers
-
Ravi Varma Mudduluru 12,370 Reputation points • Microsoft External Staff • Moderator
Hello @Marimuthu G ,
Thank you for reaching out to Microsoft Q&A.
Completely understand the concern about keeping the same Public IP for your web server to avoid disrupting your internal sites.
Answer for your questions:
1.Yes, it’s possible to upgrade from Basic to Standard SKU while retaining the same static Public IP address.2.The safest approach is usually through the Azure Portal for visibility.
3.No, do not upgrade the Public IP SKU first
Navigate to VPN Gateway → Settings → Configuration and select Delete Basic Public IP Reference. If all operations are showing a Succeeded status and you see the details below in your VPN Gateway configuration, you can proceed with deleting the Basic Public IP reference. (Zero Downtime)
If the operation completes successfully, no further action is required from your side. The IP address will be automatically upgraded to the Standard SKU, and you will see the following message.
If the Delete Basic Public IP Reference operation fails with an error, please check the private message and share the requested details there. Once we receive the information, we will connect with you and walk you through the next steps in the process.
Reference:
https://learn.microsoft.com/en-us/azure/vpn-gateway/basic-sku-public-ip-remove
Upgrade a VPN Gateway SKU - Azure VPN Gateway | Microsoft LearnKindly let us know if the above helps or you need further assistance on this issue.
Please "Accept Answer" if the information helped you. This will help us and others in the community as well.
-
Hi @Marimuthu G
Q: Is it possible to upgrade from Basic SKU to Standard SKU while keeping the same Public IP address?
A: Yes
Q: What is the safest method to do this without causing downtime or IP change — via Azure Portal or PowerShell?
A: Use portal as described in article below
Q: Should we upgrade the Public IP SKU first before updating the VPN Gateway configuration?
A: No, do not upgrade the Public IP SKU first
For Basic SKU VPN Gateway you need to use portal to remove Basic SKU pubic IP reference. Your public IP stays the same and there is no network interruption. Article below details the required steps plus has helpful FAQs providing more details.
I recommend reading through the entire document before starting the steps.
Remove the Basic SKU public IP address reference from a Basic SKU VPN gateway - Azure portal
https://learn.microsoft.com/en-us/azure/vpn-gateway/basic-sku-public-ip-remove
Please click Accept Answer and upvote if the above was helpful.
Thanks.
-TP
