Azure Virtual WAN
An Azure virtual networking service that provides optimized and automated branch-to-branch connectivity.
197 questions
Adding a VPN Site bug?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 28.000000000000004%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDP%3C/text%3E%3C/svg%3E)
Dean Porter
1
Reputation point
I fully accept this was caused by my bad ARM params JSON, but the resulting outage was unexpected to say the least.
A value of null was accidently added to the vpnSiteAddressList array. This didn't error during the Test or WhatIf checks in the script, but took all the sites on the vHub down when deployed.
As I said, I know this was my fault by not catching the error in the params, but would you expect this to take everything down?
{count} votes
-
GitaraniSharma-MSFT 49,261 Reputation points Microsoft Employee2022-06-23T04:58:01.143+00:00 Hello @Dean Porter ,
Could you please provide some more details on your issue for better clarity?
From your description, I understand that a null value was accidently added to the vpnSiteAddressList array in your ARM params JSON and this didn't give any error during the Test or WhatIf checks in the script, but took all the sites on the vHub down when deployed and you would like to know if this is expected behavior or a bug, is that correct?
Regards,
Gita -
GitaraniSharma-MSFT 49,261 Reputation points Microsoft Employee
2022-06-27T13:08:26.183+00:00 Hello @Dean Porter ,
I'm following up on my previous comment.
Could you please provide an update as requested?Regards,
Gita -
Dean Porter 1 Reputation point
2022-06-27T13:23:02.66+00:00 Hi Gita,
Apologies for the delay, yes your synopsys was spot on.
When the site was setup via the ARM template, with the null value, it went into a bad config and took my S2S links down on the hub.
As I said I just wanted to know if anyone else thought this should have been the expected outcome or not.
Cheers
Dean -
GitaraniSharma-MSFT 49,261 Reputation points Microsoft Employee
2022-06-27T13:27:08.03+00:00 Thank you for the confirmation, @Dean Porter .
Let me check this internally and get back to you with an update.
Regards,
Gita -
GitaraniSharma-MSFT 49,261 Reputation points Microsoft Employee
2022-07-06T13:04:28.15+00:00 Hello @Dean Porter ,
I checked with the Product Group team and they have asked if you have an existing support request for this issue that we can look into for more details? Also, could you please confirm if it was a visual thing wherein all sites on the hub went into failed state (but data path was still working) or did datapath also fail?
Additionally, vpnsiteaddresslist can be null/empty since if site is BGP-configured, vpnsiteaddresslist would be null as there are no static configs- all routes are dynamically learned via BGP.
Regards,
Gita -
GitaraniSharma-MSFT 49,261 Reputation points Microsoft Employee
2022-07-11T15:36:04.123+00:00 Hello @Dean Porter ,
I'm following up on my previous comment.
Could you please share the requested information for further discussion on this issue?Regards,
Gita
Sign in to comment