vHUBs in West Europe and North Europe with NVAs using static routes. WE works and NE fails

Question

I have an express route created and connected to a vHUB in West Europe. This hub has an integration to NVA - Palo Alto FW, traffic is routed using static routes. Everything works well for the traffic traversing from Azure to on prem and vice versa.

Now, we are adding North Europe as our second region, replicating the same setup as in West Europe using the same Express Route. everything is green within the setup at the moment.

As and when we add static routes to the hub, the traffic between West Europe also stops working and North Europe doesnt work too.

below is the drawing of West Europe and we are replicating the same to North Europe Region with same Express Route

Any idea,, how to handle the static routes or is the idea totally wrong

Answer 1

@Vinit Bassi ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I am afraid it is challenging to isolate the issue without understanding the routing and exact address prefixes across the two Hubs.

• From your verbatim, I take it that you are using Integrated NVAs in a Virtual WAN hub
  • With this, Any-to-any connectivity is possible
• With static routes, you should have a understanding of how the routing is configured and there is no Asymmetric routing or misroutes.
• Is there any reason you are using Static Routes and not Hub routing intent?
  • See : Virtual WAN Hubs are secured (deployed with NVA)
  • The traffic should be seamless across Hubs and OnPrem connections.

If you are still interested with Static Routes,

• You have to check the Virtual HUB's Effective Routes before and after adding your static Route (which results in the breaking of communication)
• This way, you can isolate and see what change occurred in the routes.

Let us know how this goes

Cheers,

Kapil