[Network] az network virtual-network-appliance create/update: Add --private-ip-address-version to support private ip address version

src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/route_table/_create.py

@@ -80,7 +80,6 @@ def _build_arguments_schema(cls, *args, **kwargs):
             options=["--disable-peering-route"],
             arg_group="Properties",
             help="Whether to disable the routes learned by peering on the route table. 'None' means peering routes are enabled, 'All' means all peering routes are disabled.",
-            is_preview=True,
             enum={"All": "All", "None": "None"},
         )
         return cls._args_schema

src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/route_table/_update.py

@@ -81,7 +81,6 @@ def _build_arguments_schema(cls, *args, **kwargs):
             options=["--disable-peering-route"],
             arg_group="Properties",
             help="Whether to disable the routes learned by peering on the route table. 'None' means peering routes are enabled, 'All' means all peering routes are disabled.",
-            is_preview=True,
             nullable=True,
             enum={"All": "All", "None": "None"},
         )

src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/virtual_network_appliance/_delete.py

@@ -23,9 +23,9 @@ class Delete(AAZCommand):
     """
 
     _aaz_info = {
-        "version": "2025-05-01",
+        "version": "2025-07-01",
         "resources": [
-            ["mgmt-plane", "/subscriptions/{}/resourcegroups/{}/providers/microsoft.network/virtualnetworkappliances/{}", "2025-05-01"],
+            ["mgmt-plane", "/subscriptions/{}/resourcegroups/{}/providers/microsoft.network/virtualnetworkappliances/{}", "2025-07-01"],
         ]
     }
 
@@ -146,7 +146,7 @@ def url_parameters(self):
         def query_parameters(self):
             parameters = {
                 **self.serialize_query_param(
-                    "api-version", "2025-05-01",
+                    "api-version", "2025-07-01",
                     required=True,
                 ),
             }

src/azure-cli/azure/cli/command_modules/network/tests/latest/test_network_commands.py

@@ -5300,7 +5300,7 @@ def test_network_route_table_operation(self, resource_group):
         self.cmd('network route-table delete --resource-group {rg} --name {table}')
         self.cmd('network route-table list --resource-group {rg}', checks=self.is_empty())
 
-    @ResourceGroupPreparer(name_prefix='cli_test_route_table_disable_peering', location='centraluseuap')
+    @ResourceGroupPreparer(name_prefix='cli_test_route_table_disable_peering')
     def test_network_route_table_disable_peering_route(self, resource_group):
         self.kwargs.update({
             'table': 'cli-test-rt-peering',
@@ -9355,6 +9355,66 @@ def test_network_virtual_network_appliance(self, resource_group):
 
         self.assertTrue(vna_list[0].get('id') == vna2_id)
 
+    @ResourceGroupPreparer(name_prefix='test_vna_ip_version', location='eastus')
+    def test_network_virtual_network_appliance_private_ip_address_version(self, resource_group):
+        self.kwargs.update({
+            'vnet1': 'vnet-ipv4',
+            'vnet2': 'vnet-dualstack',
+            'vnet_address': '10.10.0.0/16',
+            'subnet': 'VirtualNetworkApplianceSubnet',
+            'subnet_address': '10.10.0.0/24',
+            'vna_ipv4': 'vna-ipv4',
+            'vna_dualstack': 'vna-dualstack',
+        })
+
+        # create vnet/subnet for IPv4 vna
+        self.cmd('network vnet create -g {rg} -n {vnet1} --address-prefixes {vnet_address}')
+        self.kwargs['subnet1_id'] = self.cmd(
+            'network vnet subnet create -g {rg} -n {subnet} --vnet-name {vnet1} '
+            '--address-prefix {subnet_address} --default-outbound false --query id'
+        ).get_output_in_json()
+
+        # create vna with --private-ip-address-version IPv4
+        self.cmd(
+            'network virtual-network-appliance create -g {rg} -n {vna_ipv4} '
+            '--bandwidth-in-gbps 50 --subnet \"{{id:{subnet1_id}}}\" '
+            '--private-ip-address-version IPv4'
+        )
+
+        self.cmd('network virtual-network-appliance show -g {rg} -n {vna_ipv4}', checks=[
+            self.check('privateIPAddressVersion', 'IPv4'),
+            self.check('bandwidthInGbps', 50),
+        ])
+
+        # create vnet/subnet for DualStack vna (need both IPv4 and IPv6 address spaces)
+        self.cmd('network vnet create -g {rg} -n {vnet2} --address-prefixes {vnet_address} fd00:db8::/48')
+        self.kwargs['subnet2_id'] = self.cmd(
+            'network vnet subnet create -g {rg} -n {subnet} --vnet-name {vnet2} '
+            '--address-prefixes {subnet_address} fd00:db8::/64 '
+            '--default-outbound false --query id'
+        ).get_output_in_json()
+
+        # create vna with --private-ip-address-version DualStack
+        self.cmd(
+            'network virtual-network-appliance create -g {rg} -n {vna_dualstack} '
+            '--bandwidth-in-gbps 100 --subnet \"{{id:{subnet2_id}}}\" '
+            '--private-ip-address-version DualStack'
+        )
+
+        self.cmd('network virtual-network-appliance show -g {rg} -n {vna_dualstack}', checks=[
+            self.check('privateIPAddressVersion', 'DualStack'),
+            self.check('bandwidthInGbps', 100),
+        ])
+
+        # verify list output includes both fields
+        vna_list = self.cmd('network virtual-network-appliance list -g {rg}', checks=[
+            self.check('length(@)', 2),
+        ]).get_output_in_json()
+
+        for vna in vna_list:
+            self.assertIn('privateIPAddressVersion', vna)
+            self.assertIn('bandwidthInGbps', vna)
+
 
 class DdosCustomPolicyScenarioTest(ScenarioTest):
     @ResourceGroupPreparer(name_prefix='test_ddos_cuspol', location='eastus')