A S2S VPN gateway connection is a connection over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel. These connections can be used for hybrid configurations and cross-premises configurations. They were designed to create a secure connection between a location and your virtual network over the internet. This location can be something such as an office. Once the S2S VPN connection has been configured, you can connect every device from that location to Azure using the same VPN location. 

A S2S connection requires a compatible VPN device located on-premises that has a public IP address assigned to it. It should not be located behind a NAT.

For more information about the various compatible VPN devices, you can refer to the following documentation:  ...

Get Microsoft Azure Architect Technologies: Exam Guide AZ-300 now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.