Azure VNet Gateway for ExpressRoute

Ramesh Kasver 21

Hi Team,
Is it possible to ping VNet gateway from VMs (created in same VNet) in expressroute ?
Also can we assign private IP to VNet gateway for expressroute ?
Thanks

1 answer

msrini-MSFT 9,286 Reputation points Microsoft Employee

2021-11-23T09:09:26.383+00:00

@Ramesh Kasver ,

Please use layer 4 connectivity test to ping the Public IP of VNET gateway. Like psping IP:443.

Regards,
Karthik Srinivas
Please sign in to rate this answer.
Ramesh Kasver 21 Reputation points

2021-11-23T09:17:51.933+00:00

Hi Karthik,

Thanks for your reply, appreciate in case you could also share some step by step guide to do this testing using psping.

Good day !!

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2021-11-23T11:32:48.747+00:00

Hello @Ramesh Kasver ,

There is no readymade guide available for this testing. However, the steps would be like below:

Download PStools from : https://learn.microsoft.com/en-us/sysinternals/downloads/psping

Open CMD (command prompt) and change directory to the location where pstools is downloaded.

Type psping.exe with the IP address and port and hit enter as below:
psping.exe 13.xx.xx.xx:443

Also, you cannot assign private IP to ExpressRoute gateway.

Regards,
Gita

Ramesh Kasver 21 Reputation points

2021-11-23T12:37:12.057+00:00

Hi Gita,

Many thanks, we are able to ping now.
In line, can we check connectivity between VNet gateway and MSEE's end BGP(primary & secondary subnets) IPs.

Thanks!!

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2021-11-23T14:05:42.633+00:00

@Ramesh Kasver , you can validate BGP and routes on the MSEE by pulling the routing table from MSEE on the Primary/Secondary path. You can use Azure Portal/PowerShell/CLI/ARM templates.

Reference : https://learn.microsoft.com/en-us/azure/expressroute/expressroute-troubleshooting-expressroute-overview#validate-bgp-and-routes-on-the-msee

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Ramesh Kasver 21 Reputation points

2021-11-24T08:52:39.373+00:00

Hi team,

Unfortunately we are not able to ping public IP of the intended VNet gateway, which we are using for ExpressRoute connection, through our VM.
Note- we used PSPing and command line as suggested. Also there is no option to assign private IP to VNet gateway of ExpressRoute type.

Thanks !

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2021-11-26T14:16:55.87+00:00

Hello @Ramesh Kasver ,

Apologies for the delay in my response.

You should be able to psping the Public IP of the Vnet gateway on port 443 if traffic is allowed from the VM properly. Are you able to connect/ping normal Internet from the VM? Could you try disabling the firewall on the VM and try again? Also, please check if there is any NSG associated with the VM NIC/subnet which could be preventing this traffic.

And as previously mentioned, you cannot assign private IP to ExpressRoute gateway. Only Public IP can be assigned.

Regards,
Gita

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2021-12-01T11:45:37.003+00:00

Hello @Ramesh Kasver , any updates on this issue?

GitaraniSharma-MSFT 49,651 Reputation points Microsoft Employee

2021-12-07T05:04:53.193+00:00

Hello @Ramesh Kasver , do you have any updates on this issue?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure VNet Gateway for ExpressRoute

1 answer

Your answer