Azure virtual WAN

Question

Azure virtual WAN

Dalbir Singh Rana 120

AZ800 - Implement on-premises and hybrid network connectivity

Implement Azure Virtual WAN

i'm just trying to follow through here
https://learn.microsoft.com/en-gb/training/modules/implement-hybrid-network-infrastructure/6-configure-azure-virtual-wide-area-network

when i've tried to lab this out i noticed trying to add a virtual network connection is grayed out by default? is that expected behaviour

I don't understand the difference between virtual wan instance and a virtual hub instance? Also when creating the hub i'm not quite following the difference between the selection of P2S and S2S in those.

My understanding is the azure virtual wan is giving a solution to replace the functionality of a MPLS cloud between offices assumingly for cases where we may have dfsr replication and this offering can let those office connect via virtual wan for a common routing solution.

anand 235 Reputation points

2024-04-04T01:14:35.3966667+00:00

Hi Dalbir Singh,

As this is high level design question I will try to provide you some points that you can explore, Azure Expressroute will be required, Azure Firewall, Azure VPN also check out Azure vWAN and VNET peering you are correct. Explore the Expressroute design and connectivity documentation expressroute-connectivity-models

For remote users you can try Azure Virtual Desktop and this should help for roaming users connecting to local sites. virtual-wan-global-transit-network-architecture

Also this one expressroute

Please Accept the answer if the information helped you. This will help us and others in the community as well.
anand 235 Reputation points

2024-04-04T02:15:01.5566667+00:00
Hi Dalbir Singh,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Is it possible you can share a architecture diagram of your environment.

Per your verbatim, you have 2 VNets in each region, is that correct?

Are you using 2 separate Hubs in your vWAN?

One vHub and One VNet acting as Hub and the firewall is deployed in this VNet (i.e, not integrated)?

Multi Hub configurations are not recommended.

To enable connectivity to the secondary region, can you please make sure if "Branch-to-Branch" is enabled on the vWAN?

If not, can you please enable it and check if you are able to access the secondary region's Hub VNet?

Though you have added the routes to "Spoke VNet" in custom routing,

I dont think these routes will be pushed into the P2S address range (as vWAN would not be aware of these routes)

Basically, you are trying to achieve, P2S remote user ----> vHub ----> Spoke1 ----> Spoke2

Please let me know if secondary region's Hub VNet is accessible after enabling Branch-to-Branch.

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Is it possible you can share a architecture diagram of your environment.

Per your verbatim, you have 2 VNets in each region, is that correct?

Are you using 2 separate Hubs in your vWAN?

One vHub and One VNet acting as Hub and the firewall is deployed in this VNet (i.e, not integrated)?

Multi Hub configurations are not recommended.

To enable connectivity to the secondary region, can you please make sure if "Branch-to-Branch" is enabled on the vWAN?

If not, can you please enable it and check if you are able to access the secondary region's Hub VNet?

Though you have added the routes to "Spoke VNet" in custom routing,

I dont think these routes will be pushed into the P2S address range (as vWAN would not be aware of these routes)

Basically, you are trying to achieve,
P2S remote user ----> vHub ----> Spoke1 ----> Spoke2

Please let me know if secondary region's Hub VNet is accessible after enabling Branch-to-Branch. Additional Reference link https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

https://learn.microsoft.com/en-us/azure/virtual-wan/about-virtual-hub-routing-preference

https://learn.microsoft.com/en-us/azure/virtual-wan/about-nva-hub

Please let us know if they were helpful and don't hesitate to reach out to us if you face any issue.

If the provided answer has helped, please click on the "Accept answer" button so that it is useful for other members in the Microsoft Q&A community.

Thank you.
Anonymous

2024-04-04T02:41:47.85+00:00

Hi Dalbir Singh,

Thank you for reaching out to us on the Microsoft Q&A forum.

We will look into this issue and get back to you soon.

1 answer

Your answer

anand 235 Reputation points

2024-04-04T01:14:35.3966667+00:00

Hi Dalbir Singh,

As this is high level design question I will try to provide you some points that you can explore, Azure Expressroute will be required, Azure Firewall, Azure VPN also check out Azure vWAN and VNET peering you are correct. Explore the Expressroute design and connectivity documentation expressroute-connectivity-models

For remote users you can try Azure Virtual Desktop and this should help for roaming users connecting to local sites. virtual-wan-global-transit-network-architecture

Also this one expressroute

Please Accept the answer if the information helped you. This will help us and others in the community as well.
Anonymous

2024-04-04T02:41:47.85+00:00

Hi Dalbir Singh,

Thank you for reaching out to us on the Microsoft Q&A forum.

We will look into this issue and get back to you soon.

Answer 1

Hi Dalbir Singh,

Thank you for reaching out to us on the Microsoft Q&A forum.

In Azure Virtual WAN, the option to add a virtual network connection is initially grayed out because you must first create a Virtual Hub within your Virtual WAN instance.
A Virtual WAN instance in Azure represents a global network spanning multiple regions, where you can establish one or more Virtual Hubs.
Virtual Hubs serve as central points for connecting branch offices, VNets, and on-premises networks in a hub-and-spoke topology.
When creating a Virtual Hub, you must choose between P2S and S2S connections:

P2S connects individual client devices to the Virtual Hub over the internet.
S2S connects on-premises networks to the Virtual Hub over the internet.

Azure Virtual WAN replaces traditional MPLS networks with a cloud-based solution, providing centralized management and scalability for connecting branch offices, VNets, and on-premises networks.

Virtual WAN resources:

https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about#resources

How to configure Virtual WAN Hub routing intent and routing policies: HTTPs://learn.microsoft.com/en-us/azure/virtual-wan/how-to-routing-policies

Please let us know if they were helpful and don't hesitate to reach out to us if you face any issue.

If the provided answer has helped, please click on the "Accept answer" button so that it is useful for other members in the Microsoft Q&A community.

Share via

Azure virtual WAN

1 answer

Your answer