Understanding ExpressRoute

Tom Wrigglesworth 91 Reputation points
2024-04-01T10:18:19.0966667+00:00

Hi all,

I'm trying to get my head around ExpressRoute and what situations would call for it. I've got a couple of questions that (sorry if I seem a bit dense) would clear things up for me.

I am connecting my office to my azure servers and have a un-provisioned express route circuit. Not keen on spending that amount for testing.

  • How does the virtual network gateway know to use the ER connection to get to the data centre, rather than the internet?
  • Where to I get the ASN for private peering? Is it something I can just make up?
  • Do I need to have 2 IP addresses for the private peering at my office?
  • Would I need to configure the VLAN ID on the WAN port in the office or is that just for Azure to use?

I've read the documentation and the YouTube videos but still struggling with these.

Would appreciate any help :)

Thanks

Tom

Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,421 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,228 questions
Azure ExpressRoute
Azure ExpressRoute
An Azure service that provides private connections between Azure datacenters and infrastructure, either on premises or in a colocation environment.
337 questions
{count} votes

Accepted answer
  1. Marcin Policht 15,620 Reputation points MVP
    2024-04-01T11:10:26.5+00:00
    • How does the virtual network gateway know to use the ER connection to get to the data centre, rather than the internet?

    When you set up an ExpressRoute circuit, you'll need to configure a virtual network gateway in Azure and a corresponding router on your on-premises network. The gateway and router will establish a BGP peering session and exchange routing information. The router on your on-premises network will advertise the routes to your on-premises network over the ExpressRoute circuit, and the virtual network gateway in Azure will learn those routes and use the ExpressRoute circuit to reach the on-premises network.

    • Where do I get the ASN for private peering? Is it something I can just make up?

    The ASN for private peering is typically assigned by your Internet Service Provider (ISP) or telecommunications provider. You can't just make it up. You should be able to obtain the ASN from your provider when you request private peering.

    • Do I need to have 2 IP addresses for the private peering at my office?

    Yes, you'll need two IP addresses for private peering - one for your on-premises router's interface facing the ExpressRoute circuit, and one for your on-premises router's interface facing your on-premises network. These IP addresses should be in different subnets.

    • Would I need to configure the VLAN ID on the WAN port in the office or is that just for Azure to use?

    You'll need to configure the VLAN ID on the WAN port of your on-premises router. The VLAN ID is used to identify the traffic that is being sent over the ExpressRoute circuit, and it needs to match the VLAN ID that you configure in Azure when you set up the ExpressRoute circuit.


    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful