This guide helps you fix network issues with the Azure VPN Client on a Linux computer running systemd-resolved (like Ubuntu) to connect to a virtual network using a VPN Gateway point-to-site (P2S) VPN and Microsoft Entra ID authentication. Issues can be inconsistencies when trying to reach Azure services like KeyVault which are protected by Azure VPN via a Private Link. This can occur when systemd-resolved does not resolve DNS using the Azure VPN connection created by the Azure VPN Client.
To check if this issue affects you check to see what dns you system uses to resolve an Azure resource with.
The example used here is a KeyVault named my-key-vault.
dig my-key-vault.vault.azure.net