Azure Site Recovery Preview Over ExpressRoute

Bechir Gharbi 301 Reputation points
2022-09-01T21:04:44.093+00:00

Hello,
I need to implement ASR Preview over Expressroute, so I have :
* An Onprem Network connected to Azure over an Expressroute.
* Azure Site Recovery created with private endpoint to the hub vnet.
* Storage account created with private endpoint to the same hub vnet.
* ASR appliance onprem on VMWare.

Is that all I need ?
When I try to register the appliance I get an error like this "Proxy server's registration has failed. Vault access from Public IP <the public ip of my network> is disallowed".

I dont need to go via internet but via Expressroute.

Azure ExpressRoute
Azure ExpressRoute
An Azure service that provides private connections between Azure datacenters and infrastructure, either on premises or in a colocation environment.
323 questions
Azure Site Recovery
Azure Site Recovery
An Azure native disaster recovery service. Previously known as Microsoft Azure Hyper-V Recovery Manager.
636 questions
{count} votes

2 answers

Sort by: Most helpful
  1. msrini-MSFT 9,261 Reputation points Microsoft Employee
    2022-09-02T05:38:05.047+00:00

    Hi,

    When you have your PE enabled for any Service, when you try to resolve the FQDN of the service from a Source which is outside of your VNET which is linked to your Private DNS Zone, it will resolve to the Public IP of the service instead of the Private Endpoint IP.

    So you will need to setup your On-Premises DNS to resolve the FQDn to Private Endpoint's IP. Or you will need to forward the DNS queries to Azure where you can setup Private Resolver: https://learn.microsoft.com/en-us/azure/dns/dns-private-resolver-overview

    Regards,
    Karthik Srinivas

    0 comments No comments

  2. Bechir Gharbi 301 Reputation points
    2022-09-02T15:02:37.24+00:00

    The DNS resolution works well now but still I get the same error when trying to register ASR appliance
    "Proxy server's registration has failed. Vault access from Public IP <the public ip of my network> is disallowed".