Azure Virtual WAN
An Azure virtual networking service that provides optimized and automated branch-to-branch connectivity.
197 questions
1 answer
Site to Site HUB Routing issue for in Azure VWAN
Greetings, I am building a proof of concept architecture using Azure VWAN and having issues routing internal private traffic between branches. For sake of simplicity I will include only the parts of the infrastructure that are relevant to the…
asked 2023-12-04T09:33:50.4166667+00:00
MILAN OMIDVAR
0
Reputation points
commented 2023-12-11T11:46:39.57+00:00
GitaraniSharma-MSFT
48,531
Reputation points Microsoft Employee
2 answers
Azure Virtual WAM - Routing Intent configured
Hi, I have a simple question. in Azure Virtual Hub in Virtual WAN, if we configure Routing Intent and protect all connections with Azure firewall (Internal and Internet). If i add a static route in Connection, to send internet traffic to a NVA place in…
asked 2023-10-31T15:52:12.5866667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 63%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Amol Admin account
11
Reputation points
answered 2023-12-10T05:44:52.0133333+00:00
Amol Admin account
11
Reputation points
1 answer
Using BGP peering with Azure route server for hub and spoke model vs Azure VWAN
Our scenario - We have two separate environments setup on Azure as below: 1. Hub and spoke model with third party NVA connected to on-prem with ExpressRoute connection 2. Azure Virtual WAN integrated with Azure firewall, connected to on-premise…
asked 2023-11-17T13:34:57.64+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 9%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Suwarna S Kale
301
Reputation points
answered 2023-11-18T03:07:07.73+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
24,081
Reputation points Microsoft Employee
1 answer
Can NVA be placed behind Azure load balancer and Load balancer Frontend IP can be used to exchange bgp routes?
We are planning to implement Fortigate SDWAN devices in a spoke Vnet. They are in HA mode with Azure load balancer. We want to exchange the routes from SDWAN and Azure Virtual Hub. Can there be BGP setup between azure virtual hub to Azure load balancer…
asked 2023-11-09T08:14:11.92+00:00
Amol Admin account
11
Reputation points
commented 2023-11-12T05:33:55.57+00:00
KapilAnanth-MSFT
38,791
Reputation points Microsoft Employee
1 answer
Cisco SD-WAN 800v BGP peering with VWAN hub
Hi, I have 2 regions of Azure connected to each other via Azure VWAN hub. Also we have Azure express route from each Azure region landing into the on-prem DC. We intend to manually deploy 2 x Cisco SD-WAN 8000v routers in each region and setup BGP…
asked 2023-10-01T05:00:18.8+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 84%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIK%3C/text%3E%3C/svg%3E)
Imroz Khan
0
Reputation points
commented 2023-10-31T05:08:40.7466667+00:00
KapilAnanth-MSFT
38,791
Reputation points Microsoft Employee
2 answers
Express Route and VPN together
Our scenario: We are planning to use Express Route, VWAN integrated with Azure Firewall in East US (primary site) and West US (secondary/DR site) and we will be connecting the on-premise data center with Express Route. Questions: If we are using the…
asked 2023-10-17T12:02:02.0033333+00:00
Suwarna S Kale
301
Reputation points
commented 2023-10-30T12:34:11.3966667+00:00
GitaraniSharma-MSFT
48,531
Reputation points Microsoft Employee
1 answer
Unable to delete virtual wan resources
Hello, I am having trouble deleting a virtual wan resource group I don't have an error message when i delete the resoure group. no error when i delete any of the vwan resources. I tried the azure portal, Powershell, CLI and the REST API, but nothing…
asked 2023-10-25T16:42:13.7566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 87%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
raouf.maaroufi-prestataire
0
Reputation points
answered 2023-10-26T20:15:19.25+00:00
ChaitanyaNaykodi-MSFT
24,081
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Filter traffic from a site-to-site vpn with virtual hub, vwan and Azure firewall.
I have implemented a virtual hub, vwan and azure firewall, I need the traffic coming through a vpn site to site to be filtered by azure firewall. I am not sure how to configure it, but I have checked in microsoft documentation and I see that I could…
asked 2023-10-19T20:02:28.26+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 57.00000000000001%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEO%3C/text%3E%3C/svg%3E)
Edwin Omar Fonseca Padilla
65
Reputation points
commented 2023-10-25T04:48:42.2533333+00:00
KapilAnanth-MSFT
38,791
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
Azure Vwan routes level (vnet, subnet)
Hello, We wants to isolate subnets within spoke vnets. The aim is to force traffic to an NVA (not managed by vWan) We thought it would be possible by overriding default route to vnet in vWAN route table. For instance, if my spoke is 10.21.4.0/24, I add a…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 59%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
1 answer
One of the answers was accepted by the question author.
Route Internet traffic to an NVA via Virtual-HUB
Hi guys I am trying to push internet traffic into an NVA attached to a vnet peered with a Virtual-Wan-HUB. The peer connection works just fine and I already have a static route configured for VPN clients (although this subnet is actually part of the…
asked 2022-05-10T12:35:49.787+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 10%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJV%3C/text%3E%3C/svg%3E)
James Vale (jvale)
21
Reputation points
commented 2023-10-16T17:59:47.0566667+00:00
Amol Admin account
11
Reputation points
0 answers
Route advertisement in vwan
Hi, We have a transit Vnet with Palo Alto firewall and f5 LTM hosting internet and intr?
asked 2023-08-29T06:42:47.68+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 62%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESP%3C/text%3E%3C/svg%3E)
Sharad Pandey
0
Reputation points
edited the question 2023-10-13T19:20:53.77+00:00
Sharad Pandey
0
Reputation points
1 answer
What is the Cisco 8000v instance size, as part of the "create a Network Virtual Appliance" process
I am onboarding the Cisco SD-WAN 8000v routers in Azure portal as part of create a Network Virtual Appliance (NVA) and it takes me to the Azure market place page "Cisco SD-WAN for Azure Virtual WAN". However it doesnot allow me to choose the…
asked 2023-09-27T11:56:18.0566667+00:00
Imroz Khan
0
Reputation points
commented 2023-10-12T16:39:26.1366667+00:00
GitaraniSharma-MSFT
48,531
Reputation points Microsoft Employee
1 answer
NVA & vHub routing issue
I have below network : 2 vNet in eastus connect to vHub1 ( vNet1 & vNet2 ) 1 vNet in CentralUS connect to vHub2 ( vNet3 ) vHub1 & vHub2 are belongs to my vWan1 ( vHub1 in eastus , vHub2 in centralUS ) 1 VM in each vNet, they can connect to…
asked 2023-10-01T04:08:44.6233333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 45%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYD%3C/text%3E%3C/svg%3E)
Yu Dongdong
0
Reputation points
commented 2023-10-12T03:59:42.51+00:00
KapilAnanth-MSFT
38,791
Reputation points Microsoft Employee
2 answers
One of the answers was accepted by the question author.
Different egress points for prod and non-prod using virtual wan
Hi, I'm looking to use Virtual WAN for centralized internet egress and vnet-to-vnet connectivity. However, I need to be able to differentiate between non-prod and prod egress traffic while allowing access from a common management network to both non-prod…
asked 2023-10-04T23:33:10.1966667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 70%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESC%3C/text%3E%3C/svg%3E)
Shane Corgatelli
40
Reputation points
accepted 2023-10-09T14:21:09.8433333+00:00
Shane Corgatelli
40
Reputation points
1 answer
One of the answers was accepted by the question author.
vWAN Hub not allowing transit traffic from 3rd party NVA
Routing issue with NVA VM.png Hi Folks, I am new to MS Azure and I am struggling with this routing issue since a day now, trying to simulate an upcoming deployment scenario in my free-tier account, please refer to the diagram attached to get more…
asked 2023-10-05T13:28:58.61+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 20%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGS%3C/text%3E%3C/svg%3E)
Gaurav Sehgal
20
Reputation points
edited the question 2023-10-09T05:57:08.9+00:00
KapilAnanth-MSFT
38,791
Reputation points Microsoft Employee
1 answer
ExpressRoute and FortiGate BGP Issue in a Azure Virtual WAN
Good evening. We have deployed an Azure virtual WAN with a secured hub. The Azure virtual WAN has a VPN and ExpressRoute gateway deployed. The Azure virtual WAN routing preference is configured as ASPATH. All internet and private traffic is routed…
asked 2023-09-21T17:49:59.86+00:00
Jonathan Bell
26
Reputation points
commented 2023-10-04T16:39:13.4166667+00:00
ChaitanyaNaykodi-MSFT
24,081
Reputation points Microsoft Employee
1 answer
Where can I find Azure (private) DNS / Network limitations and what are their consequences
Hi, some of the azure products form an important part of our infrastructure. There are a few, but most importantly a private DNS zone, a virtual WAN, a virtual network, a MSSQL database, a private DNS resolver, and a couple of VMs for DNS forwarding via…
asked 2023-09-25T13:15:27.62+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 26%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
databay
0
Reputation points
answered 2023-09-29T03:09:58.63+00:00
ChaitanyaNaykodi-MSFT
24,081
Reputation points Microsoft Employee
0 answers
Virtual Wan Site to Site VPN Tunnel stops working after a couple days
Hello, i have a VPN site-to-site tunel between virtual wan and a fortigate appliance. Both sides show the tunel as UP and Connected, traffic flows in both directions and after a couple days it stops. Local Network: 172.24.8.0/21 Remote Network:…
asked 2023-09-19T12:20:51.36+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(227.2, 94%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDF%3C/text%3E%3C/svg%3E)
Diego Fernandes Spinola Castro
0
Reputation points
commented 2023-09-21T17:34:40.75+00:00
KapilAnanth-MSFT
38,791
Reputation points Microsoft Employee
1 answer
Vnet peering
Is it possible to peer two vnet in the same region directly along with the vWan peering it already has. I need to make services between the vnet work while resolving vnwan route issues. Adding direct peering while it has a vWan peering should not cause…
asked 2023-09-14T05:55:32.31+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 46%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
prasantc
876
Reputation points
commented 2023-09-21T05:58:08.35+00:00
KapilAnanth-MSFT
38,791
Reputation points Microsoft Employee
1 answer
Azure Wan VPN Azure Firewall Routing Issue
I have a secured WAN with firewall and routing intent configured (internet and private ) traffic going through firewall. After creating a VPN site and connection to the HUB, i can confirm that the tunnel is UP and i see the on-premise's subnets…
asked 2023-08-31T01:37:20.3433333+00:00
Diego Fernandes Spinola Castro
0
Reputation points
commented 2023-09-07T13:32:20.31+00:00
KapilAnanth-MSFT
38,791
Reputation points Microsoft Employee