Azure Hub Network with NVA and azure firewall and routing between VPN and Express route gateway through firewalls
Hi Team, I have attached the network diagram, Here is set up. There is HUB and Spoke topology with NVA. All traffic between on-premise and azure spoke is passing through NVA Third party location is connected through SDWAN VM over internet. SDWAN VM is…
Users are not able to see some resources in a resource group where they have respective contributor access.
I created a resource group and added some resources in that. There I added my team through security group which has respective contributor roles for those resources. Some of these resources including blob storage is not visible to the team. To…
Configuration of an external firewall + ExpressRoute
Hello Community, I read a few threads here in the forum about a similar case, but the answer wasn't 100 percent clear to me. The following structure: I have an ExpressRoute via a VPN gateway in Azure, which is connected to OnPrem. An NVA (not from…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
How to send traffic from a spoc (Hub and Spoc topology) to workload behind NVA present in 3rd party connected via Express route which only broadcast the NVA subnet range
Hi, In my scenario - From Azure Spoc, we are trying to reach workload for example (10.129.31.35) present behind a NVA hosted in a 3rd party system which is connected to Azure Hub vnet via Express route to Azure and broad cast only NVA's subnet range…
Synchronize with Entra Connect through ExpressRoute
Hello, Hope you are doing well! I think it is the prerequisite to deploy the hybrid AVD environment, so I need to use Entra Connect to synchronize the on-premise AD and Entra ID in a locked hybrid network which connected by ExpressRoute between…
Express Route private peering - BGP peering on prem but not in Azure
Established express route private peering. BGP sessions are established to on prem (see output below). Why isn't the Virtual Network Gateway displaying BGP Peering status? LCCO-AMdurNC01Brt11-AWS#sho ip bgp all summary Neighbor V AS…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
How to debug where BGP session is failing
I've setup an Azure express route private peering session with on prem. Layer 2 connection is verified. I can ping from on prem to Azure. The ARP tables look good. The BGP peers are communicating but the BGP session is not established. How can I find out…
Branchoffice not available via ExpressRoute
Infrastructure: Azure - ExpressRoute Circuits (BGP) Subnet 10.20.0.0/16 Main Office Sophos Firewall Subnet 10.0.0.0/24 Branch Office Sophos Firewall Subnet 192.168.110.0/23 Azure (AVD) is connected via ExpressRoute to the Main Office. The…
ExpressRoute (Microsoft peering) connectivity to Azure Virtual Desktop
Hi Team, We are working on a requirement to help our customer end users based out in Philippines connect via ExpressRoute (Microsoft peering) to Azure Cloud AVD solution hosted in Azure SG and JP region. Hence, we wanted to check if Azure AVD solution is…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
How to route trafic from VPN S2S towards new ExpressRoute setup
Hello All, I've a current setup on Azure (hub and spoke architecture) where on my hub i've one Azure Firewall, a virtunal network gateway (VPN) to reach my on-premise and peerings between spokes vnets and hub vnet. I've also UDR defined on subnets…
ExpressRoute and VPN Gateway Deployment
We have a new Azure subscription with a new ExpressRoute circuit and a ER Gateway. We are looking to connect our existing subscription, which has an Azure VPN gateway deployed. Can we just vNET peer between the vNETs or is there any other requirements…
How to Reset Private Peering in an Azure ExpressRoute Circuit
What are the steps to reset the private peering in an Azure ExpressRoute circuit, and how long does it take to establish the connection after reset? PS - Based on common issues that we have seen from customers and other sources; we are posting these…
![](https://techprofile.blob.core.windows.net/images/Nd_pi7-IHkuDC3BVgl0RFQ.png?8D81F2)
![](https://techprofile.blob.core.windows.net/images/Nd_pi7-IHkuDC3BVgl0RFQ.png?8D81F2)
Azure private link can connect to service which out side Azure environment
From the document able to understand azure private link mainly using to connect between service within in any azure virtual network to other azure service out side the network securely without traveling traffic through internet. So with the same feature…
![](https://techprofile.blob.core.windows.net/images/WcjpNjM8Vkqnq_i4f4aj4Q.png?8D9A05)
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
2 hubs and vnet peering with expressroute
Hello, We are working on the design phase of our vnets and its connectivity to Expressroute. We have several stakeholders that require Expressroute connectivity and our in the same AD domain etc. So the most logical scenario would be to use the…
vHUBs in West Europe and North Europe with NVAs using static routes. WE works and NE fails
I have an express route created and connected to a vHUB in West Europe. This hub has an integration to NVA - Palo Alto FW, traffic is routed using static routes. Everything works well for the traffic traversing from Azure to on prem and vice versa. Now,…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
how to create route table to point to bgp over ipsec tunnel vwan hub express route choose vpn over express route
how to create route table to point to bgp over ipsec tunnel vwan hub express route choose vpn over express route
Routing Issues with S2S VPN VNET Peered with ExpressRoute VNET
The Context: I have 3 VNETS (VNET1, VNET2, VNET3). VNET1 has a S2S VPN allowing on-prem devices to connect to Azure. VNET2 has an ExpressRoute allowing another subnet of on-prem devices to connect to Azure. VNET3 also has an ExpressRoute allowing another…
How to fix ExpressRoute circuit in failed state?
I have an ExpressRoute circuit set up with a partner (Equinix). I am able to create the circuit, eventually get the service key, give it to Equinix, and it all looks right. Eventually it says "Provider Status: Provisioned". So I go to…
![](https://techprofile.blob.core.windows.net/images/lvNaBJBqh0eurOu4q2bQSQ.png?8DA4E8)
ExpressRoute connectivity partners to campus network?
Hi All, I recently went through a discussion about connectivity to the cloud from the campus network which left me thinking how you could connect big campus network with high bandwidth requirements towards the Azure without any DC? My first choice was…
Express Route and Azure Firewall
We have express route to on-prem and it is working fine. We are in the process of implementing Az Firewall but are having trouble getting the routing right. I know you cannot add routes to the Express Route subnet so how do we force traffic that…
![](https://techprofile.blob.core.windows.net/images/Nd_pi7-IHkuDC3BVgl0RFQ.png?8D81F2)