Types (4)
Point-to-site
Site-to-site
Multisite
ExpressRoute
Site-to-Site info (2)
IPSec
Backup for ExpressRoute
Point-to-site authentication
SSTP: Windows
IKEv2: MAC OS
Cert based
Peering
Uses MS Backbone, guaranteed throughput and secure
Routing options
Policy based (static) Site-to-Site only
Route-based (dynamic) S2S, P2S and Multi site
S2S, P2S and Multi can share if all use the routing
Multi-site
VPN device at each location
one VPN Gateway in Azure vnet
All sites must use same routing rule