There is a command group 'az_network_vpn connection'. This group of commands could 'manage vpn connections'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_vpn connection_create'.The syntax is: az network vpn-connection create --name
                                 --resource-group
                                 --vnet-gateway1
                                 [--authorization-key]
                                 [--enable-bgp]
                                 [--express-route-circuit2]
                                 [--express-route-gateway-bypass {false, true}]
                                 [--local-gateway2]
                                 [--location]
                                 [--routing-weight]
                                 [--shared-key]
                                 [--tags]
                                 [--use-policy-based-traffic-selectors {false, true}]
                                 [--validate]
                                 [--vnet-gateway2]. The 1th example of the child command would be to use it to 'create a site to site connection between an azure virtual network and an on premises local network gateway', the syntax is: az network vpn-connection create -g MyResourceGroup -n MyConnection --vnet-gateway1 MyVnetGateway --local-gateway2 MyLocalGateway --shared-key Abc123. The 2th example of the child command would be to use it to 'create a vpn connection with   ingress nat rule', the syntax is: az network vpn-connection create -g MyResourceGroup -n MyConnection --vnet-gateway1 MyVnetGateway --local-gateway2 MyLocalGateway --shared-key Abc123 --ingress-nat-rule /subscriptions/000/resourceGroups/TestBGPRG1/providers/Microsoft.Network/virtualNetworkGateways/gwx/natRules/nat. The 3th example of the child command would be to use it to 'create a vpn connection   autogenerated', the syntax is: az network vpn-connection create --location westus2 --name MyConnection --resource-group MyResourceGroup --shared-key Abc123 --vnet-gateway1 MyVnetGateway --vnet-gateway2 /subscriptions/{subscriptionID}/resourceGroups/TestBGPRG1/providers/Microsoft.Network/virtualNetworkGateways/VNet1GW. The 4th example of the child command would be to use it to 'create a vpn connection   autogenerated', the syntax is: az network vpn-connection create --local-gateway2 MyLocalGateway --location westus2 --name MyConnection --resource-group MyResourceGroup --shared-key Abc123 --vnet-gateway1 MyVnetGateway. The parameter '--name -n' is required. It is used to connection name.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--vnet-gateway1' is required. It is used to name or id of the source virtual network gateway.. The parameter '--authorization-key' is optional. the authorization key for the vpn connection.. The parameter '--enable-bgp' is optional. enable bgp for this vpn connection.. The parameter '--express-route-circuit2' is optional. name or id of the destination expressroute to connect to using an 'expressroute' connection.. The parameter '--express-route-gateway-bypass' is optional. bypass expressroute gateway for data forwarding.. The parameter '--local-gateway2' is optional. name or id of the destination local network gateway to connect to using an 'ipsec' connection.. The parameter '--location -l' is optional. location. values from: `az account list-locations`. you can configure the default location using `az configure --defaults location=<location>`.. The parameter '--routing-weight' is optional. connection routing weight.. The parameter '--shared-key' is optional. shared ipsec key.. The parameter '--tags' is optional. space-separated tags: key[=value] [key[=value] ...]. use "" to clear existing tags.. The parameter '--use-policy-based-traffic-selectors' is optional. enable policy-based traffic selectors.. The parameter '--validate' is optional. display and validate the arm template but do not create any resources.. The parameter '--vnet-gateway2' is optional. name or id of the destination virtual network gateway to connect to using a 'vnet2vnet' connection.. 