diff --git a/samples/manage/azure-sql-db-managed-instance/attach-vpn-gateway/azuredeploy.json b/samples/manage/azure-sql-db-managed-instance/attach-vpn-gateway/azuredeploy.json
index eb603ed7..ca5795f0 100644
--- a/samples/manage/azure-sql-db-managed-instance/attach-vpn-gateway/azuredeploy.json
+++ b/samples/manage/azure-sql-db-managed-instance/attach-vpn-gateway/azuredeploy.json
@@ -77,10 +77,6 @@
                     "name": "Standard",
                     "tier": "Standard"
                 },
-                "vpnClientProtocols": [
-                    "IkeV2",
-                    "SSTP"
-                  ],
                 "gatewayType": "Vpn",
                 "vpnType": "RouteBased",
                 "enableBgp": "false",
@@ -90,6 +86,10 @@
                             "[parameters('vpnClientAddressPoolPrefix')]"
                         ]
                     },
+                    "vpnClientProtocols": [
+                        "IkeV2",
+                        "SSTP"
+                    ],                    
                     "vpnClientRootCertificates": [
                         {
                             "name": "[variables('clientRootCertName')]",
@@ -102,4 +102,4 @@
             }
         }
     ]
-}
\ No newline at end of file
+}