Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,504 questions
2 answers
One of the answers was accepted by the question author.
Azure Hub Network with NVA and azure firewall and routing between VPN and Express route gateway through firewalls
Hi Team, I have attached the network diagram, Here is set up. There is HUB and Spoke topology with NVA. All traffic between on-premise and azure spoke is passing through NVA Third party location is connected through SDWAN VM over internet. SDWAN VM is…
asked 2024-08-20T21:58:14.7633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 67%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
Siddhesh Rane
41
Reputation points
answered 2024-09-03T19:39:38.16+00:00
Siddhesh Rane
41
Reputation points
1 answer
Users are not able to see some resources in a resource group where they have respective contributor access.
I created a resource group and added some resources in that. There I added my team through security group which has respective contributor roles for those resources. Some of these resources including blob storage is not visible to the team. To…
asked 2024-08-29T11:24:41.9633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(294.40000000000003, 60%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPD%3C/text%3E%3C/svg%3E)
Pankaj Dua
0
Reputation points
commented 2024-09-02T06:41:36.6866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 64%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENR%3C/text%3E%3C/svg%3E)
Nehruji R
6,891
Reputation points Microsoft Vendor
1 answer
Configuration of an external firewall + ExpressRoute
Hello Community, I read a few threads here in the forum about a similar case, but the answer wasn't 100 percent clear to me. The following structure: I have an ExpressRoute via a VPN gateway in Azure, which is connected to OnPrem. An NVA (not from…
asked 2023-09-19T06:16:27.5466667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 46%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPG%3C/text%3E%3C/svg%3E)
Philipp Gerber
271
Reputation points
commented 2024-08-26T06:39:02.0166667+00:00
KapilAnanth-MSFT
43,646
Reputation points Microsoft Employee
1 answer
How to send traffic from a spoc (Hub and Spoc topology) to workload behind NVA present in 3rd party connected via Express route which only broadcast the NVA subnet range
Hi, In my scenario - From Azure Spoc, we are trying to reach workload for example (10.129.31.35) present behind a NVA hosted in a 3rd party system which is connected to Azure Hub vnet via Express route to Azure and broad cast only NVA's subnet range…
asked 2024-08-20T16:57:44.2966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 59%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Mukherjee, Aniket
0
Reputation points
answered 2024-08-22T03:01:14.7866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
25,381
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Synchronize with Entra Connect through ExpressRoute
Hello, Hope you are doing well! I think it is the prerequisite to deploy the hybrid AVD environment, so I need to use Entra Connect to synchronize the on-premise AD and Entra ID in a locked hybrid network which connected by ExpressRoute between…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 62%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EY%3C/text%3E%3C/svg%3E)
1 answer
Express Route private peering - BGP peering on prem but not in Azure
Established express route private peering. BGP sessions are established to on prem (see output below). Why isn't the Virtual Network Gateway displaying BGP Peering status? LCCO-AMdurNC01Brt11-AWS#sho ip bgp all summary Neighbor V AS…
asked 2024-08-10T04:46:09.73+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 63%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETD%3C/text%3E%3C/svg%3E)
Thompson, Daryl
20
Reputation points
answered 2024-08-12T08:57:17.0033333+00:00
KapilAnanth-MSFT
43,646
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
How to debug where BGP session is failing
I've setup an Azure express route private peering session with on prem. Layer 2 connection is verified. I can ping from on prem to Azure. The ARP tables look good. The BGP peers are communicating but the BGP session is not established. How can I find out…
asked 2024-08-09T22:37:09.22+00:00
Thompson, Daryl
20
Reputation points
edited the question 2024-08-12T03:23:29.7366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 86%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
AmaranS
5,785
Reputation points Microsoft Vendor
1 answer
One of the answers was accepted by the question author.
Branchoffice not available via ExpressRoute
Infrastructure: Azure - ExpressRoute Circuits (BGP) Subnet 10.20.0.0/16 Main Office Sophos Firewall Subnet 10.0.0.0/24 Branch Office Sophos Firewall Subnet 192.168.110.0/23 Azure (AVD) is connected via ExpressRoute to the Main Office. The…
asked 2024-07-31T14:25:26.9433333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 96%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETD%3C/text%3E%3C/svg%3E)
Tom de Smidt | Hermac BV
20
Reputation points
accepted 2024-08-07T11:18:29.78+00:00
Tom de Smidt | Hermac BV
20
Reputation points
1 answer
ExpressRoute (Microsoft peering) connectivity to Azure Virtual Desktop
Hi Team, We are working on a requirement to help our customer end users based out in Philippines connect via ExpressRoute (Microsoft peering) to Azure Cloud AVD solution hosted in Azure SG and JP region. Hence, we wanted to check if Azure AVD solution is…
asked 2024-08-02T06:27:45.7766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 3%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKY%3C/text%3E%3C/svg%3E)
Kadam, Yogesh
0
Reputation points
commented 2024-08-07T09:46:48.03+00:00
KapilAnanth-MSFT
43,646
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
How to route trafic from VPN S2S towards new ExpressRoute setup
Hello All, I've a current setup on Azure (hub and spoke architecture) where on my hub i've one Azure Firewall, a virtunal network gateway (VPN) to reach my on-premise and peerings between spokes vnets and hub vnet. I've also UDR defined on subnets…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 95%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
1 answer
ExpressRoute and VPN Gateway Deployment
We have a new Azure subscription with a new ExpressRoute circuit and a ER Gateway. We are looking to connect our existing subscription, which has an Azure VPN gateway deployed. Can we just vNET peer between the vNETs or is there any other requirements…
asked 2024-08-02T11:50:15.8733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 86%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDB%3C/text%3E%3C/svg%3E)
Damen Barker
20
Reputation points
commented 2024-08-02T12:53:49.5066667+00:00
Damen Barker
20
Reputation points
1 answer
How to Reset Private Peering in an Azure ExpressRoute Circuit
What are the steps to reset the private peering in an Azure ExpressRoute circuit, and how long does it take to establish the connection after reset? PS - Based on common issues that we have seen from customers and other sources; we are posting these…
asked 2024-08-01T11:45:02.86+00:00
GitaraniSharma-MSFT
49,466
Reputation points Microsoft Employee
answered 2024-08-01T11:45:33.2366667+00:00
GitaraniSharma-MSFT
49,466
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Azure private link can connect to service which out side Azure environment
From the document able to understand azure private link mainly using to connect between service within in any azure virtual network to other azure service out side the network securely without traveling traffic through internet. So with the same feature…
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
501 questions
Azure ExpressRoute
Azure ExpressRoute
An Azure service that provides private connections between Azure datacenters and infrastructure, either on premises or in a colocation environment.
356 questions
Azure Training
Azure Training
Azure: A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.Training: Instruction to develop new skills.
1,464 questions
asked 2024-07-29T11:14:26.4533333+00:00
SADIQALI KP
41
Reputation points
commented 2024-07-30T08:53:36.7533333+00:00
KapilAnanth-MSFT
43,646
Reputation points Microsoft Employee
3 answers
2 hubs and vnet peering with expressroute
Hello, We are working on the design phase of our vnets and its connectivity to Expressroute. We have several stakeholders that require Expressroute connectivity and our in the same AD domain etc. So the most logical scenario would be to use the…
asked 2020-09-02T08:40:16.107+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 23%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
Jasper Van Damme
111
Reputation points
commented 2024-07-29T07:37:45.0766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 89%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVB%3C/text%3E%3C/svg%3E)
Vinit Bassi
0
Reputation points
1 answer
vHUBs in West Europe and North Europe with NVAs using static routes. WE works and NE fails
I have an express route created and connected to a vHUB in West Europe. This hub has an integration to NVA - Palo Alto FW, traffic is routed using static routes. Everything works well for the traffic traversing from Azure to on prem and vice versa. Now,…
asked 2024-07-24T11:50:38.5333333+00:00
Vinit Bassi
0
Reputation points
commented 2024-07-26T09:14:32.1533333+00:00
KapilAnanth-MSFT
43,646
Reputation points Microsoft Employee
1 answer
how to create route table to point to bgp over ipsec tunnel vwan hub express route choose vpn over express route
how to create route table to point to bgp over ipsec tunnel vwan hub express route choose vpn over express route
asked 2024-07-23T19:44:41.8733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 51%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETA%3C/text%3E%3C/svg%3E)
Ted A. Rizzo
0
Reputation points
answered 2024-07-24T00:57:26.05+00:00
ChaitanyaNaykodi-MSFT
25,381
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Routing Issues with S2S VPN VNET Peered with ExpressRoute VNET
The Context: I have 3 VNETS (VNET1, VNET2, VNET3). VNET1 has a S2S VPN allowing on-prem devices to connect to Azure. VNET2 has an ExpressRoute allowing another subnet of on-prem devices to connect to Azure. VNET3 also has an ExpressRoute allowing another…
asked 2024-07-02T14:29:17.2566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 73%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER1%3C/text%3E%3C/svg%3E)
RahulRana-1085
30
Reputation points
accepted 2024-07-15T18:11:00.6866667+00:00
RahulRana-1085
30
Reputation points
1 answer
One of the answers was accepted by the question author.
How to fix ExpressRoute circuit in failed state?
I have an ExpressRoute circuit set up with a partner (Equinix). I am able to create the circuit, eventually get the service key, give it to Equinix, and it all looks right. Eventually it says "Provider Status: Provisioned". So I go to…
asked 2024-07-03T10:54:42.1166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 16%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
avi
20
Reputation points
commented 2024-07-05T14:53:50.4766667+00:00
KapilAnanth-MSFT
43,646
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
ExpressRoute connectivity partners to campus network?
Hi All, I recently went through a discussion about connectivity to the cloud from the campus network which left me thinking how you could connect big campus network with high bandwidth requirements towards the Azure without any DC? My first choice was…
asked 2024-07-04T10:04:57.1233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 71%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDJ%3C/text%3E%3C/svg%3E)
David Jones
20
Reputation points
accepted 2024-07-04T13:30:29.2966667+00:00
David Jones
20
Reputation points
2 answers
Express Route and Azure Firewall
We have express route to on-prem and it is working fine. We are in the process of implementing Az Firewall but are having trouble getting the routing right. I know you cannot add routes to the Express Route subnet so how do we force traffic that…
asked 2022-05-23T14:06:36.88+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 35%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
MDavis
26
Reputation points
commented 2024-07-03T13:31:02.44+00:00
GitaraniSharma-MSFT
49,466
Reputation points Microsoft Employee