Hi All, Can we add or create both expressroute and vpn gateway in same gateway subnet through portal since it is giving me error while doing the same. Initially I had depolyed vpn gateway then when I tried to create expressroute gateway in the same gateway subnet it gives error. Also what are the possible options or ways to include both the gateway types in the same gateway subnet. Thanks, Aniket.

Hello @Aniket Jagadale , welcome to the Microsoft Q&A platform. Yes, it is possible to deploy a coexisting ExpressRoute and Site-to-Site in the same gateway subnet via portal but there is no official documentation available for it yet. The recommended method is to use PowerShell and you can follow this documentation to Configure ExpressRoute and Site-to-Site coexisting connections . The common issue while deploying another type of gateway within the same gateway subnet is the subnet size. At least /27 or larger subnet size is required in this scenario. If this is the issue in your scenario, then you have to first delete the virtual network gateway and increase the gateway subnet size. You can also go through these limitations and see if any of these caused this issue. Hope this helps. Please let me know if you have any additional questions. Thank you!

Both expressroute and vpn gateway in same gateway subnet

Accepted answer

ChaitanyaNaykodi-MSFT 24,231 Reputation points Microsoft Employee

2022-01-28T14:53:10.097+00:00

Hello @Aniket Jagadale , welcome to the Microsoft Q&A platform.

Yes, it is possible to deploy a coexisting ExpressRoute and Site-to-Site in the same gateway subnet via portal but there is no official documentation available for it yet. The recommended method is to use PowerShell and you can follow this documentation to Configure ExpressRoute and Site-to-Site coexisting connections.

The common issue while deploying another type of gateway within the same gateway subnet is the subnet size. At least /27 or larger subnet size is required in this scenario. If this is the issue in your scenario, then you have to first delete the virtual network gateway and increase the gateway subnet size. You can also go through these limitations and see if any of these caused this issue.

Hope this helps. Please let me know if you have any additional questions. Thank you!
Please sign in to rate this answer.
Aniket Jagadale 31 Reputation points

2022-01-28T14:57:47.827+00:00

So if I already have an existing VPN gateway and under the Connections can I add a ExpressRoute ckt. Or do I've to create a new ExpressRoute Gateway and then add ExpressRoute ckt to it using Powershell commands.

ChaitanyaNaykodi-MSFT 24,231 Reputation points Microsoft Employee

2022-01-31T15:27:28.78+00:00

Hello @@Aniket Jagadale , if you have an existing ExpressRoute ckt then you will have to create a new ExpressRoute Gateway and link the ckt to it. You can find the required PowerShell commands at step 10 & 11 from this section of the guide shared above. Hope this helps. Please let me know if you have any additional questions. Thank you!

Aniket Jagadale 31 Reputation points

2022-01-31T16:12:12.363+00:00

Actually my query was if I've one S2S VPN gateway and already I've added a S2S VPN connection ckt into it. So if I just add a ExpressRoute ckt connection to it will it work.

Also if I've created one ExpressRoute VPN gateway and already I've added a ExpressRoute VPN connection ckt into it. So can I add a new ExpressRoute ckt connection directly to it. Can I merge both the ExpressRoute ckt connections into a single ExpressRoute VPN gateway. Can I do this through normal Azure portal steps.

ChaitanyaNaykodi-MSFT 24,231 Reputation points Microsoft Employee

2022-01-31T18:10:27.237+00:00

Hello @Aniket Jagadale ,

Actually my query was if I've one S2S VPN gateway and already I've added a S2S VPN connection ckt into it. So if I just add a ExpressRoute ckt connection to it will it work.

No, you will have to create a ExpressRoute Gateway in the same Vnet and then add the ExpressRoute ckt to it.

Also if I've created one ExpressRoute VPN gateway and already I've added a ExpressRoute VPN connection ckt into it. So can I add a new ExpressRoute ckt connection directly to it. Can I merge both the ExpressRoute ckt connections into a single ExpressRoute VPN gateway. Can I do this through normal Azure portal steps.

Yes, you can add upto 16 ExpressRoute ckts to a single ExpressRoute Gateway. You can follow this guide to add a ExpressRoute ckt to your ExpressRoute Gateway via Portal.

PS- Just to make sure that there is no confusion caused. As there are two types of Virtual Network Gateways 1.) ExpressRoute Gateway 2.) VPN Gateway
From your comment above I have referred ExpressRoute VPN gateway as ExpressRoute Gateway.

Please let me know if you have any additional questions, I will be glad to continue with our discussion.

Aniket Jagadale 31 Reputation points

2022-02-01T06:56:50.427+00:00

Thanks for clarifying my few doubts but I've some more queries related to S2S VPN Gateway and ExpressRoute Gateway coexistence.

In my current design I've configured a S2S VPN gateway in one Vnet and ExpressRoute VPN gateway in another Vnet. Now if I want to merge the ExpressRoute VPN gateway into S2S VPN gateway I've to follow the Powershell steps.
So can I merge the ExpressRoute VPN gateway into the existing S2S VPN gateway or do I've delete the S2S VPN gateway first then create a new ExpressRoute VPN gateway and then create and merge the S2S VPN gateway into the single Gateway subnet (please note my Gateway subnet size is of /26). So is there any preference given to ExpressRoute gateway or S2S VPN gateway first or you can add any gateway after the existing gateway.

Also as you mentioned above like you can have multiple ExpressRoute ckts i.e. max upto 16 encapsulated under one common single ExpressRoute gateway. So how can we exchange the traffic/routes coming from these ExpressRoute ckts with each other. Is there any mechanism for this.

Aniket Jagadale 31 Reputation points

2022-02-02T06:15:46.317+00:00

@ChaitanyaNaykodi-MSFT - please provide your response on this query.

ChaitanyaNaykodi-MSFT 24,231 Reputation points Microsoft Employee

2022-02-04T03:48:20.353+00:00

Hello @Aniket Jagadale , Apologies for the delay.

So is there any preference given to ExpressRoute gateway or S2S VPN gateway first or you can add any gateway after the existing gateway.

I do not see any issue in deploying either of them first, but it will easier for you to add S2S VPN gateway first as you can simply follow the documentation. Please let me know if you face any issues here.

Also as you mentioned above like you can have multiple ExpressRoute ckts i.e. max upto 16 encapsulated under one common single ExpressRoute gateway. So how can we exchange the traffic/routes coming from these ExpressRoute ckts with each other. Is there any mechanism for this.

Express Route Gateway is responsible to establish the connectivity. Route propagation on your Gateway Subnet should be enabled for gateway to function properly. Please let me know if you face any issues here to establish connectivity. Thank you!

Aniket Jagadale 31 Reputation points

2022-02-04T13:14:05.067+00:00

@ChaitanyaNaykodi-MSFT - Thanks a lot. I was able to create a new ExpressRoute gateway along with the existing S2S VPN gateway using the powershell commands and link the existing ExpressRoute ckt to it.
Sign in to comment

Share via

Both expressroute and vpn gateway in same gateway subnet

0 additional answers