Can we connect multiple on-prem with a single ExpreeRoute connection at the same price?

Khushboo Kumari 102

Hi,

I want to setup the expessroute connection for my on-prem. So my concern here is that it only connects one office to one connection at the same price, or we have to pay extra. And can one express connection connect multiple on-prem?

GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-10-27T11:54:06.8133333+00:00

@Khushboo Kumari , Just checking in to see if you had a chance to see the below answer. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

And, if you have any further questions do let us know.

How to accept an answer on Q&A - Accepting an answer helps other community members to know the answer helped you. It's also a way to thank and recognize the person who helped you.
GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-10-30T12:35:50.6933333+00:00

@Khushboo Kumari , Just checking in to see if you had a chance to see the below answer. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

And, if you have any further questions do let us know.
GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-11-06T14:58:39.72+00:00

@Khushboo Kumari , Just checking in to see if you had a chance to see the below answer. To help the community find the right answers, please do mark the post which was helpful by clicking on Accept Answer.

And, if you have any further questions do let us know.

1 answer

GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-10-26T07:30:51.3433333+00:00
Hello @Khushboo Kumari ,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

I understand that you want to setup an ExpressRoute connection for your on-premises and would like to know if it only connects one office to one connection at the same price, or you have to pay extra and can one ExpressRoute connection connect multiple on-premises.

ExpressRoute allows you to create a connection between your on-premises network and the Microsoft cloud in four different ways:

CloudExchange Co-location

Point-to-point Ethernet Connection

Any-to-any (IPVPN) Connection

ExpressRoute Direct

The CloudExchange Co-location, Point-to-point Ethernet Connection and ExpressRoute Direct are the connectivity models which would basically allow you to connect from a single on-premises office to Azure.

But Any-to-any (IPVPN) Connection allows you to integrate your WAN with the Microsoft cloud. IPVPN providers (typically MPLS VPN) offer any-to-any connectivity between your branch offices and datacenters. The Microsoft cloud can be interconnected to your WAN to make it appear like any other branch office.

So, you can choose Any-to-any (IPVPN) connectivity model when working with your connectivity provider to connect multiple on-premises at the same time.

Refer: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-connectivity-models

So, as long as you have a WAN connectivity between your multiple on-premises, you can integrate Azure via ExpressRoute into the model and access it from any connected site.

To setup Azure ExpressRoute, please go through the below docs:

Prerequisites: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-prerequisites

Workflows: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-workflows

Routing requirements: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-routing

FAQs: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-faqs

You can go through the below article which provides architectural best practice for Azure ExpressRoute.

Refer: https://learn.microsoft.com/en-us/azure/well-architected/services/networking/azure-expressroute

Kindly let us know if the above helps or you need further assistance on this issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.
Khushboo Kumari 102 Reputation points

2023-10-26T09:12:57.35+00:00

Hi, GitaraniSharma-MSFT

Thanks for the response ! I want to know how many Azure private peering can we create with a single Expessroute circuit connection??

GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-10-26T09:41:52.7733333+00:00

Hello @Khushboo Kumari ,

You can create only one Private peering in a single ExpressRoute circuit.

New ExpressRoute circuits can include two independent peerings: Private peering and Microsoft peering.

Whereas existing ExpressRoute circuits may have three peerings: Azure Public, Azure Private and Microsoft.

Public peering for ExpressRoute is being retired on March 31, 2024. For more information, see retirement notice.

Each peering is a pair of independent BGP sessions, each of them configured redundantly for high availability. There's a 1:N (1 <= N <= 3) mapping between an ExpressRoute circuit and routing domains.

Each peering is configured identically on a pair of routers (in active-active or load sharing configuration) for high availability.

An ExpressRoute circuit can have any one, two, or all three peerings enabled per ExpressRoute circuit.

Refer: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings#circuits

Hope this helps!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Khushboo Kumari 102 Reputation points

2023-10-26T12:38:01.23+00:00

ok, GitaraniSharma-MSFT means we can set up only one OnPrem to Azure connection? Actually, I'm a little bit confused. How can we setup an Any-to-Any (IPVPN) connection, as you mentioned, to connect multiple on-premises at the same time? and does this connection deduct the same charges?

GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-10-26T13:42:44.9+00:00

Hello @Khushboo Kumari ,

Any-to-any (IPVPN) networks is a connectivity model which allows you to integrate your wide area network (WAN) with Azure. Internet protocol virtual private network (IPVPN) providers (typically a multiprotocol label switching VPN) offer any-to-any connectivity between your branch offices and datacenters. Azure can be interconnected to your WAN to make it look just like any other branch office.

Refer: https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/expressroute#connectivity-providers

This model provides a connection between your branch offices and data centers using MPLS (Multiprotocol Label Switching), and the same is done when connecting to Azure. As a result, everything is virtually, directly connected to everything. In other words, if you want to communicate with the Microsoft cloud from a branch office, the communication process does not have to go through your data centers, however it can communicate with the Microsoft cloud directly.

So, if you have an existing WAN architecture where your offices are connected to each other via MPLS, then you can integrate Azure ExpressRoute into this for any-to-any connection.

WAN: https://en.wikipedia.org/wiki/Wide_area_network

MPLS: https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching

Regards,

Gita

Khushboo Kumari 102 Reputation points

2023-10-27T10:40:19.36+00:00

ok, @GitaraniSharma-MSFT so in this scenario from azure side what are the configuration required?

GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-10-27T11:00:20.8433333+00:00

Hello @Khushboo Kumari ,

From Azure side, you have to follow the below:

Prerequisites: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-prerequisites

Workflows: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-workflows

So, you work with an ExpressRoute connectivity partner to connect to the Microsoft cloud and decide on the type of connectivity model that you would like to setup. And then order connectivity from the service provider or configure ExpressRoute Direct. Then you create the ExpressRoute circuit in your Azure portal. Share the Circuit service key (s-key) and additional information needed to the connectivity provider for the circuit provisioning and enablement.

Refer: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-portal-resource-manager

NOTE: Your ExpressRoute circuit is billed from the moment a service key is issued. Ensure that you perform this operation when the connectivity provider is ready to provision the circuit.

Once the Circuit status is Enabled, and Provider status is Provisioned, you can configure the peerings if you are managing the routing.

https://learn.microsoft.com/en-us/azure/expressroute/expressroute-troubleshooting-expressroute-overview

If the provider manages the routing configuration, provide the necessary details to them.

Routing requirements: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-routing

NOTE: In an IPVPN connectivity model, service providers handle the responsibility of configuring the peerings (layer 3 services). In such a model, after the service provider has configured a peering and if the peering is blank in the portal, try refreshing the circuit configuration by using the refresh button on the portal. This operation will pull the current routing configuration from your circuit.

After the routing/peering is configured, you can link your Azure Vnet to the ExpressRoute circuit by using an ExpressRoute gateway.

https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-linkvnet-portal-resource-manager

After you link your Azure Vnet, you should be able to connect to Azure from your on-premises.

In case of any issues, you can refer the below troubleshooting documents:

https://learn.microsoft.com/en-us/azure/expressroute/expressroute-troubleshooting-arp-resource-manager

https://learn.microsoft.com/en-us/azure/expressroute/expressroute-troubleshooting-expressroute-overview

https://learn.microsoft.com/en-us/azure/expressroute/reset-circuit

Regards,

Gita

Khushboo Kumari 102 Reputation points

2023-10-27T14:23:09.78+00:00

Thanks @GitaraniSharma-MSFT , it's really informative for me. I am still confused in one thing like if we have multiple on-prem site, on that scenario we have to create separate express route circuit near the on-prem peering location and make the connection to access the Azure resources or only one express route connection will able to do? Actually I am not getting the point how the things will work. Can you please help me on this

GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-10-30T10:59:02.2433333+00:00

Hello @Khushboo Kumari ,

Like I mentioned before, Any-to-any (IPVPN) networks is a connectivity model which allows you to integrate your wide area network (WAN) with Azure. Internet protocol virtual private network (IPVPN) providers (typically a multiprotocol label switching VPN) offer any-to-any connectivity between your branch offices and datacenters. Azure can be interconnected to your WAN to make it look just like any other branch office.

So, if you have multiple offices and you want to connect to Azure via ExpressRoute from all the offices, you can talk to an Internet protocol virtual private network (IPVPN) provider and request them to interconnect all your branch offices using MPLS WAN and integrate Azure in the same WAN setup.

WANs are used to connect LANs and other types of networks together so that users and computers in one location can communicate with users and computers in other locations.

For multi-site businesses that share functions and resources, Wide Area Network (WAN) technology can be hugely beneficial. Internet Protocol Virtual Private Network (IP-VPN) is one of the many types of WAN technology available.

Based on the Backbone network owned by the IPVPN provider and using the advanced multi-protocol label switching (MPLS) technology, the IP VPN service provides end-to-end service quality assurance and security services for enterprise users to build an internal private network.

So, the IPVPN provider can take care of connecting all your on-prem sites and Azure with ExpressRoute to make it an any-to-any network, where all the offices can talk to each other and can talk to Azure as well.

Even though the Azure ExpressRoute private peering will be configured using a /30 subnet from one of your on-premises sites, the routing exchange will happen over eBGP protocol. EBGP sessions are established between the MSEEs and your routers. And since all your on-prem sites will be interconnected with each other over MPLS WAN, all the on-prem sites address prefixes will be advertised to Azure via ExpressRoute.

ExpressRoute supports up to 4000 IPv4 prefixes and 100 IPv6 prefixes advertised to Microsoft through the Azure private peering. This limit can be increased up to 10,000 IPv4 prefixes if the ExpressRoute premium add-on is enabled. ExpressRoute accept up to 200 prefixes per BGP session for Azure public and Microsoft peering.

Refer: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-routing#dynamic-route-exchange

However, if you don't want to interconnect all your on-prem sites using MPLS WAN, then any-to-any model will not work. In such a case, you will have a point-to-point connectivity from Azure to one of your on-prem sites and in order to connect other on-prem sites to Azure, you will have to deploy additional ExpressRoute circuits.

Conclusion:

If you want to connect to Azure from all your on-prem sites via ExpressRoute, you have 2 options:

Interconnect all your on-prem sites using MPLS WAN and integrate Azure into the same WAN setup by talking to an IPVPN provider.

In case of no WAN, create multiple ExpressRoute circuits to connect each site to Azure.

Hope this helps!

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Khushboo Kumari 102 Reputation points

2023-10-30T14:36:22.24+00:00

Hi , @GitaraniSharma-MSFT

Thanks a lot. It's really very informative for me. The way you explain I just love it. One more question for any connection: do we need to pay extra charges or, like, how does the cost consume?

Thanks!

GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-10-31T11:34:33.6566667+00:00

Hello @Khushboo Kumari , the cost will depend on how many resources you are using and how much bandwidth you are consuming.

If you are using a single ExpressRoute Circuit, then the cost will be for that single ExpressRoute circuit per month, the ExpressRoute gateway cost (depending upon number of gateways used and the SKU of the gateways) and the Outbound Data Transfer cost per GB depending upon your zone.

If you are using multiple ExpressRoute Circuits, then the cost will be for the number of ExpressRoute circuits per month and the above additional costs.

Refer: https://azure.microsoft.com/en-us/pricing/details/expressroute/

We don't set a limit on the amount of data transfer. So, you can transfer as much data as required but the cost will be calculated per GB as mentioned in the pricing.

Refer: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-faqs#are-there-limits-on-the-amount-of-data-that-i-can-transfer-using-expressroute

So, you should choose the bandwidth of the circuit depending upon your usage requirement.

Refer: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-introduction#bandwidth-options

Regards,

Gita

Khushboo Kumari 102 Reputation points

2023-11-02T14:48:48.4766667+00:00

Hi @GitaraniSharma-MSFT , thanks for the information can you please provide me the Visio or kind of topology for the configuration of point to point and any to any ? It will really help for me. If I have a diagram with all the components used in details.

I hope you will help me on this as soon as possible.

Thanks!

GitaraniSharma-MSFT 49,641 Reputation points Microsoft Employee

2023-11-02T16:07:14.5533333+00:00

Hello @Khushboo Kumari ,

For point-to-point ExpressRoute configuration, you can download the Visio file from the below doc:

https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/expressroute#architecture

For Any-to-Any ExpressRoute configuration, I couldn't find any publicly available Visio file, but it should look like below:

You can refer the below docs which shows such type of connectivity:

https://learn.microsoft.com/en-us/power-platform/guidance/expressroute/planning-expressroute#configuring-expressroute-for-distributed-user-bases

https://learn.microsoft.com/en-us/power-platform/guidance/expressroute/checklist#wan-performance

Hope this helps!

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Can we connect multiple on-prem with a single ExpreeRoute connection at the same price?

1 answer

Your answer