Azure Virtual WAN
An Azure virtual networking service that provides optimized and automated branch-to-branch connectivity.
201 questions
1 answer
One of the answers was accepted by the question author.
vWAN for SDWAN and Firewall - critical design
@Anonymous If you can help Here, please. i have vWAN with multiple vHubs (assume vHubx and vHuby , each one in different region). vHubx and vHubY hosting SDWAN NVA that make fullmesh connection with all SDWAN sites. but vHubx and vHubY are not…
asked 2023-12-21T19:44:51.21+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 54%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZA%3C/text%3E%3C/svg%3E)
ZEIN Ahmed OBS/S EUR
125
Reputation points
edited a comment 2024-01-17T03:47:30.7033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
24,656
Reputation points Microsoft Employee
1 answer
Connectivity between three different companies infra hosted on Azure
Dear Team, Existing Configuration: In the current setup, Company 2 has established a Site-to-Site (S2S) connectivity with Company 3, utilizing Virtual WAN. This arrangement allows Company 2 to access the SAP HANA application hosted by Company 3. Desired…
asked 2024-01-04T12:24:14.0633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 72%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPC%3C/text%3E%3C/svg%3E)
Prashant Chaudhary
20
Reputation points
edited a comment 2024-01-04T19:39:50.23+00:00
Sedat SALMAN
13,345
Reputation points
2 answers
One of the answers was accepted by the question author.
vWAN vHub connection to another Subscription vNets
Hello, i am planning a vWAN (assume in Subscription X) , where all vHubs will be in the same subscription. and all vNets are in another subsctription (Y) so all connections from any vHub will be cross subscription (X < -- > Y) 1- is there…
asked 2023-12-10T17:11:45.69+00:00
ZEIN Ahmed OBS/S EUR
125
Reputation points
commented 2023-12-15T11:42:58.1933333+00:00
ZEIN Ahmed OBS/S EUR
125
Reputation points
1 answer
One of the answers was accepted by the question author.
Exporting static route between virtual hubs
Hi, We plan to deploy a network topology with three levels : first (top) level with a virtual wan and 2 virtual hubs, for two main Organisation Units, second level with 6 « second level » hubs, each one acting as a hub for a specific business unit,…
asked 2023-12-06T21:10:47.5166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 94%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELP%3C/text%3E%3C/svg%3E)
LAUNAY Pascal
20
Reputation points
accepted 2023-12-12T18:51:33.65+00:00
LAUNAY Pascal
20
Reputation points
1 answer
How to allow only people from Entra Group to connect to Azure VPN?
My company implemented Azure Virtual WAN with both site-to-site and point-to-site connections. Employees would use Azure VPN client to connect to Azure resources. Admins would download virtual hub User VPN profile and import it to user's VPN client and…
Azure Virtual WAN
Azure Virtual WAN
An Azure virtual networking service that provides optimized and automated branch-to-branch connectivity.
201 questions
Azure VPN Gateway
Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,451 questions
Azure
Azure
A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.
1,068 questions
asked 2023-12-06T10:36:16.8+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 81%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Pitawat-MKV
5
Reputation points
commented 2023-12-12T04:00:11.7066667+00:00
ChaitanyaNaykodi-MSFT
24,656
Reputation points Microsoft Employee
1 answer
Site to Site HUB Routing issue for in Azure VWAN
Greetings, I am building a proof of concept architecture using Azure VWAN and having issues routing internal private traffic between branches. For sake of simplicity I will include only the parts of the infrastructure that are relevant to the…
asked 2023-12-04T09:33:50.4166667+00:00
MILAN OMIDVAR
0
Reputation points
commented 2023-12-11T11:46:39.57+00:00
GitaraniSharma-MSFT
49,391
Reputation points Microsoft Employee
2 answers
Azure Virtual WAM - Routing Intent configured
Hi, I have a simple question. in Azure Virtual Hub in Virtual WAN, if we configure Routing Intent and protect all connections with Azure firewall (Internal and Internet). If i add a static route in Connection, to send internet traffic to a NVA place in…
asked 2023-10-31T15:52:12.5866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 63%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Amol Admin account
11
Reputation points
answered 2023-12-10T05:44:52.0133333+00:00
Amol Admin account
11
Reputation points
1 answer
Using BGP peering with Azure route server for hub and spoke model vs Azure VWAN
Our scenario - We have two separate environments setup on Azure as below: 1. Hub and spoke model with third party NVA connected to on-prem with ExpressRoute connection 2. Azure Virtual WAN integrated with Azure firewall, connected to on-premise…
asked 2023-11-17T13:34:57.64+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 9%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Suwarna S Kale
301
Reputation points
answered 2023-11-18T03:07:07.73+00:00
ChaitanyaNaykodi-MSFT
24,656
Reputation points Microsoft Employee
1 answer
Can NVA be placed behind Azure load balancer and Load balancer Frontend IP can be used to exchange bgp routes?
We are planning to implement Fortigate SDWAN devices in a spoke Vnet. They are in HA mode with Azure load balancer. We want to exchange the routes from SDWAN and Azure Virtual Hub. Can there be BGP setup between azure virtual hub to Azure load balancer…
asked 2023-11-09T08:14:11.92+00:00
Amol Admin account
11
Reputation points
commented 2023-11-12T05:33:55.57+00:00
KapilAnanth-MSFT
41,071
Reputation points Microsoft Employee
1 answer
Cisco SD-WAN 800v BGP peering with VWAN hub
Hi, I have 2 regions of Azure connected to each other via Azure VWAN hub. Also we have Azure express route from each Azure region landing into the on-prem DC. We intend to manually deploy 2 x Cisco SD-WAN 8000v routers in each region and setup BGP…
asked 2023-10-01T05:00:18.8+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 84%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIK%3C/text%3E%3C/svg%3E)
Imroz Khan
0
Reputation points
commented 2023-10-31T05:08:40.7466667+00:00
KapilAnanth-MSFT
41,071
Reputation points Microsoft Employee
2 answers
Express Route and VPN together
Our scenario: We are planning to use Express Route, VWAN integrated with Azure Firewall in East US (primary site) and West US (secondary/DR site) and we will be connecting the on-premise data center with Express Route. Questions: If we are using the…
asked 2023-10-17T12:02:02.0033333+00:00
Suwarna S Kale
301
Reputation points
commented 2023-10-30T12:34:11.3966667+00:00
GitaraniSharma-MSFT
49,391
Reputation points Microsoft Employee
1 answer
Unable to delete virtual wan resources
Hello, I am having trouble deleting a virtual wan resource group I don't have an error message when i delete the resoure group. no error when i delete any of the vwan resources. I tried the azure portal, Powershell, CLI and the REST API, but nothing…
asked 2023-10-25T16:42:13.7566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 87%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
raouf.maaroufi-prestataire
0
Reputation points
answered 2023-10-26T20:15:19.25+00:00
ChaitanyaNaykodi-MSFT
24,656
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Filter traffic from a site-to-site vpn with virtual hub, vwan and Azure firewall.
I have implemented a virtual hub, vwan and azure firewall, I need the traffic coming through a vpn site to site to be filtered by azure firewall. I am not sure how to configure it, but I have checked in microsoft documentation and I see that I could…
asked 2023-10-19T20:02:28.26+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 57.00000000000001%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEO%3C/text%3E%3C/svg%3E)
Edwin Omar Fonseca Padilla
65
Reputation points
commented 2023-10-25T04:48:42.2533333+00:00
KapilAnanth-MSFT
41,071
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
Azure Vwan routes level (vnet, subnet)
Hello, We wants to isolate subnets within spoke vnets. The aim is to force traffic to an NVA (not managed by vWan) We thought it would be possible by overriding default route to vnet in vWAN route table. For instance, if my spoke is 10.21.4.0/24, I add a…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 59%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Route Internet traffic to an NVA via Virtual-HUB
Hi guys I am trying to push internet traffic into an NVA attached to a vnet peered with a Virtual-Wan-HUB. The peer connection works just fine and I already have a static route configured for VPN clients (although this subnet is actually part of the…
asked 2022-05-10T12:35:49.787+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 10%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
James Vale (jvale)
21
Reputation points
commented 2023-10-16T17:59:47.0566667+00:00
Amol Admin account
11
Reputation points
0 answers
Route advertisement in vwan
Hi, We have a transit Vnet with Palo Alto firewall and f5 LTM hosting internet and intr?
asked 2023-08-29T06:42:47.68+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 62%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sharad Pandey
0
Reputation points
edited the question 2023-10-13T19:20:53.77+00:00
Sharad Pandey
0
Reputation points
1 answer
What is the Cisco 8000v instance size, as part of the "create a Network Virtual Appliance" process
I am onboarding the Cisco SD-WAN 8000v routers in Azure portal as part of create a Network Virtual Appliance (NVA) and it takes me to the Azure market place page "Cisco SD-WAN for Azure Virtual WAN". However it doesnot allow me to choose the…
asked 2023-09-27T11:56:18.0566667+00:00
Imroz Khan
0
Reputation points
commented 2023-10-12T16:39:26.1366667+00:00
GitaraniSharma-MSFT
49,391
Reputation points Microsoft Employee
1 answer
NVA & vHub routing issue
I have below network : 2 vNet in eastus connect to vHub1 ( vNet1 & vNet2 ) 1 vNet in CentralUS connect to vHub2 ( vNet3 ) vHub1 & vHub2 are belongs to my vWan1 ( vHub1 in eastus , vHub2 in centralUS ) 1 VM in each vNet, they can connect to…
asked 2023-10-01T04:08:44.6233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 45%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYD%3C/text%3E%3C/svg%3E)
Yu Dongdong
0
Reputation points
commented 2023-10-12T03:59:42.51+00:00
KapilAnanth-MSFT
41,071
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
Different egress points for prod and non-prod using virtual wan
Hi, I'm looking to use Virtual WAN for centralized internet egress and vnet-to-vnet connectivity. However, I need to be able to differentiate between non-prod and prod egress traffic while allowing access from a common management network to both non-prod…
asked 2023-10-04T23:33:10.1966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 70%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESC%3C/text%3E%3C/svg%3E)
Shane Corgatelli
40
Reputation points
accepted 2023-10-09T14:21:09.8433333+00:00
Shane Corgatelli
40
Reputation points
1 answer
One of the answers was accepted by the question author.
vWAN Hub not allowing transit traffic from 3rd party NVA
Routing issue with NVA VM.png Hi Folks, I am new to MS Azure and I am struggling with this routing issue since a day now, trying to simulate an upcoming deployment scenario in my free-tier account, please refer to the diagram attached to get more…
asked 2023-10-05T13:28:58.61+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 20%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGS%3C/text%3E%3C/svg%3E)
Gaurav Sehgal
20
Reputation points
edited the question 2023-10-09T05:57:08.9+00:00
KapilAnanth-MSFT
41,071
Reputation points Microsoft Employee