If you create a "Virtual Network Gateway" of type "ExpressRoute" and vpn_type=RouteBased, gateway breaks without errors

[adammontlake]

Is there an existing issue for this?

• I have searched the existing issues

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment and review the contribution guide to help.

Terraform Version

1.6.6

AzureRM Provider Version

3.87.0

Affected Resource(s)/Data Source(s)

azurerm_virtual_network_gateway

Terraform Configuration Files

resource "azurerm_virtual_network_gateway" "vpn" {
  name                       = "name"
  location                   = var.location
  resource_group_name        = "rg_name"
  sku                        = "ErGw3AZ"
  type                       = "ExpressRoute"
  active_active              = "false"
  generation                 = "None"
  vpn_type                   = "RouteBased"

  ip_configuration {
    name                          = "vnetGatewayConfig"
    public_ip_address_id          = azurerm_public_ip.example.id
    private_ip_address_allocation = "Dynamic"
    subnet_id                     = azurerm_subnet.example.id
  }
}

Debug Output/Panic Output

Deployment succeeds.

Expected Behaviour

This should fail, as VPN type should not be set on an express route gateway. However, the deployment succeeds, but the gateway is in some way faulty, and you cannot send any data through it.
I struggled with this issue for a few days, would suggest checking for this in the provider just because it is easy and would save lots of time for anyone else who might make this mistake.

Actual Behaviour

Deployment succeeds.

Steps to Reproduce

apply any ER gateway with the vpn_type=RouteBased

Important Factoids

No response

References

No response