Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,528 questions
My VPN gateway tunnels do not work when Express route is in place
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 19%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAI%3C/text%3E%3C/svg%3E)
Andrade, Ivan
1
Reputation point
I have a couple of VPN tunnels setup in the VPN gateway that are not working properly and I am not sure if this has to do with the Express route connection we setup a few months ago. We had no need to use the VPN gateway tunnels but now we are in need to set those up but it seems we are not getting the routes in the inside networks coming from the VPN gateway and therefore we can't communicate to the VPNs. The express route is working well without any issues.
{count} votes
-
GitaraniSharma-MSFT 49,591 Reputation points Microsoft Employee2022-04-21T09:04:59.29+00:00 Hello @Andrade, Ivan ,
Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.
I understand that you have VPN and ExpressRoute setup for your on-premises connectivity to Azure and when ExpressRoute is in place, VPN tunnels are not working.
Could you please provide the below details for further investigation?
- Are you using ExpressRoute and Site-to-Site coexisting connections?
- Is the Site-to-Site VPN used as a secure failover path/backup for ExpressRoute?
If Site-to-Site VPN is used as a failover path for ExpressRoute and both have same routes configured, then ExpressRoute circuit is preferred over Site-to-Site VPN. The ExpressRoute circuit is always the primary link. Data flows through the Site-to-Site VPN path only if the ExpressRoute circuit fails.
However, if different routes are used/specific routes are present in either of the connection, Azure will use the longest prefix match to choose the route towards the packet's destination.
Refer : https://video2.skills-academy.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portalRegards,
Gita -
GitaraniSharma-MSFT 49,591 Reputation points Microsoft Employee
2022-04-27T06:58:35.277+00:00 -
GitaraniSharma-MSFT 49,591 Reputation points Microsoft Employee
2022-05-06T05:37:31.2+00:00 Hello @Andrade, Ivan ,
Could you please provide an update on this post and share the requested details for further discussion?
Regards,
Gita -
GitaraniSharma-MSFT 49,591 Reputation points Microsoft Employee
2022-05-10T08:19:00.64+00:00 Hello @Andrade, Ivan , Could you please provide an update on this post?
Sign in to comment
Sign in to answer