How to promote Virtual Network Gateway Routes between to different Route Servers in different Regions.

Question

How to promote Virtual Network Gateway Routes between to different Route Servers in different Regions.

Manny 0

If I have a Virtual Network Gateway on Azure East with a Site-to-Site (IPSEC) Connection to access some VM's in AWS, how can I promote these routes from the Route Server on East Region to the Route Server on the West Region so my NVA's on the East and West can ping the VM's in AWS? Currently my NVA on the East can ping all servers in AWS, but my NVA on the West cannot ping and I think it has to do with BGP not populating a proper route to my NVA on the West. Both NVA's are interconnected with a IPSEC VPN and BGP is configured between the NVA's and Route Server on both regions. Do I need to build another Virtual Network Gateway on the West Region since it doesn't have one?

KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-03-15T09:31:06.0833333+00:00

@Manny

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-03-16T14:37:00.6766667+00:00

@Manny

Reaching out to check if there are any questions on this.

Please let us know if we can be of any further assistance here.

Thanks,

Kapil

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how

1 answer

Your answer

KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-03-15T09:31:06.0833333+00:00

@Manny

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-03-16T14:37:00.6766667+00:00

@Manny

Reaching out to check if there are any questions on this.

Please let us know if we can be of any further assistance here.

Thanks,

Kapil

Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how

Answer 1

@Manny

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you would like to achieve Transit connectivity between West Region and AWS via East Region.

May I ask if there is any requirement that you must use a Route Server and your NVA?

If so, please do let me know.

If not, what you are trying to achieve is a straight forward configuration.

For which, you do not have to use Azure Route Server, just establish a VNet Peering or IPSEC between West and East Regions.

VNet Peering:

You can establish VNet Peering between the VNets
Enable "Use the remote virtual network's gateway" on the peering from West to East, and
Enable "Use this virtual network's gateway" on the peering from East to West
Refer : Configure VPN gateway transit for virtual network peering

or

IPSec Connection:

Establish a VNet-to-Vnet Tunnel between East and West VNet.
Enable BGP on this connection.
This is documented here : How to configure BGP for Azure VPN Gateway

Kindly let us know if the above helps or you need further assistance on this issue.

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Manny 0 Reputation points

2023-03-13T03:31:42.8733333+00:00

Thank you for your answer. I did exactly what you said and it worked perfectly. What I also did was since the East Region NVA is on passthrough Mode and doesn't route traffic, I kept the Route Server on just the East and set up BGP on the NVA, and now all the adjoining routers in the entire network is able to ping the servers in AWS.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2023-03-13T03:33:23.39+00:00

@Manny-7111

I am so glad the set up is working and I could be of service.

I have converted my comment to an answer and I would highly appreciate if you can Accept the answer and close this thread, which will be beneficial to other community members.

Cheers,

Kapil

Share via

How to promote Virtual Network Gateway Routes between to different Route Servers in different Regions.

1 answer

Your answer