There is a command group 'az_network_vnet gateway'. This group of commands could 'use an azure virtual network gateway to establish secure  cross premises connectivity'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_vnet gateway_create'.The syntax is: az network vnet-gateway create --name
                               --public-ip-address
                               --resource-group
                               --vnet
                               [--address-prefix]
                               [--asn]
                               [--bgp-peering-address]
                               [--client-protocol]
                               [--gateway-default-site]
                               [--gateway-type {expressroute, vpn}]
                               [--location]
                               [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                               [--peer-weight]
                               [--radius-secret]
                               [--radius-server]
                               [--root-cert-data]
                               [--root-cert-name]
                               [--sku {basic, ergw1az, ergw2az, ergw3az, highperformance, standard, ultraperformance, vpngw1, vpngw1az, vpngw2, vpngw2az, vpngw3, vpngw3az}]
                               [--tags]
                               [--vpn-type {policybased, routebased}]. The 1th example of the child command would be to use it to 'create a basic virtual network gateway for site to site connectivity', the syntax is: az network vnet-gateway create -g MyResourceGroup -n MyVnetGateway --public-ip-address MyGatewayIp --vnet MyVnet --gateway-type Vpn --sku VpnGw1 --vpn-type RouteBased --no-wait. The 2th example of the child command would be to use it to 'create a basic virtual network gateway that provides point to site connectivity with a radius secret that matches what is configured on a radius server', the syntax is: az network vnet-gateway create -g MyResourceGroup -n MyVnetGateway --public-ip-address MyGatewayIp --vnet MyVnet --gateway-type Vpn --sku VpnGw1 --vpn-type RouteBased --address-prefixes 40.1.0.0/24 --client-protocol IkeV2 SSTP --radius-secret 111_aaa --radius-server 30.1.1.15 --vpn-gateway-generation Generation1. The 3th example of the child command would be to use it to 'create a basic virtual network gateway with multi authentication', the syntax is: az network vnet-gateway create -g MyResourceGroup -n MyVnetGateway --public-ip-address MyGatewayIp --vnet MyVnet --gateway-type Vpn --sku VpnGw1 --vpn-type RouteBased --address-prefixes 40.1.0.0/24 --client-protocol OpenVPN --radius-secret 111_aaa --radius-server 30.1.1.15 --aad-issuer https://sts.windows.net/00000-000000-00000-0000-000/ --aad-tenant https://login.microsoftonline.com/000 --aad-audience 0000-000 --root-cert-name root-cert --root-cert-data "root-cert.cer" --vpn-auth-type AAD Certificate Radius. The 4th example of the child command would be to use it to 'create a virtual network gateway', the syntax is: az network vnet-gateway create --gateway-type Vpn --location westus2 --name MyVnetGateway --no-wait --public-ip-addresses myVGPublicIPAddress --resource-group MyResourceGroup --sku Basic --vnet MyVnet --vpn-type PolicyBased. The parameter '--name -n' is required. It is used to name of the vnet gateway.. The parameter '--public-ip-address --public-ip-addresses' is required. It is used to specify a single public ip (name or id) for an active-standby gateway. specify two space-separated public ips for an active-active gateway.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--vnet' is required. It is used to name or id of an existing virtual network which has a subnet named 'gatewaysubnet'.. The parameter '--address-prefix --address-prefixes' is optional. space-separated list of cidr prefixes representing the address space for the p2s vpnclient.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.  singular flags: `--address-prefix`.. The parameter '--asn' is optional. autonomous system number to use for the bgp settings.. The parameter '--bgp-peering-address' is optional. ip address to use for bgp peering.. The parameter '--client-protocol' is optional. protocols to use for connecting.  allowed values: ikev2, openvpn, sstp.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--gateway-default-site' is optional. name or id of a local network gateway representing a local network site with default routes.. The parameter '--gateway-type' is optional. the gateway type.. The parameter '--location -l' is optional. location. values from: `az account list-locations`. you can configure the default location using `az configure --defaults location=<location>`.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--peer-weight' is optional. weight (0-100) added to routes learned through bgp peering.. The parameter '--radius-secret' is optional. radius secret to use for authentication.. The parameter '--radius-server' is optional. radius server address to connect to.. The parameter '--root-cert-data' is optional. base64 contents of the root certificate file or file path.. The parameter '--root-cert-name' is optional. root certificate name.. The parameter '--sku' is optional. vnet gateway sku.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--vpn-type' is optional. vpn routing type.. 