Azure vWAN setup in SD-WAN vnet

Question

Azure vWAN setup in SD-WAN vnet

AzurePro 80

I have below current setup

on prem >> Silver Peak SDWAN vNET >>> route server >> Application vNET

We have setup vWAN and HUB.

I need to configure BGP peer for the SD-WAN appliance of Silver peak and that needs to configure virtual connection to be added which is SD-WAN vnet

when i try to add a virtual network conenction of SD WAN vnet into vWAN it gives below error that

cannot have UseRemoteGateways flag set to true, because parent virtual network which is SDWAN vnet has already a gateway configured

Is there something wrong in configuration or addtional config is required

AzurePro 80 Reputation points

2026-02-13T07:16:10.4966667+00:00
Thanks for the response.

so in my case,

router server subnet and SD-WAN silver peak VM subnet both are in single VNET. that's why when i connect this vnet to HUB it gives me that error. now i will perform below steps and see the outcome.

remove the route server subnet from that vnet.

connect that vnet to hub

configure bgp peer of sdwan-vm ip

1 answer

Your answer

AzurePro 80 Reputation points

2026-02-13T07:16:10.4966667+00:00

Thanks for the response.

so in my case,

router server subnet and SD-WAN silver peak VM subnet both are in single VNET. that's why when i connect this vnet to HUB it gives me that error. now i will perform below steps and see the outcome.

remove the route server subnet from that vnet.

connect that vnet to hub

configure bgp peer of sdwan-vm ip

Answer 1

Hi AzurePro,

Thanks for reaching out in Microsoft Q&A forum,

when i try to add a virtual network conenction of SD WAN vnet into vWAN it gives below error that cannot have UseRemoteGateways flag set to true, because parent virtual network which is SDWAN vnet has already a gateway configured

The above error occurs because Azure enforces a restriction: a VNet cannot have multiple active "remote gateways" via peering or vWAN connections simultaneously. Your SD-WAN VNet already has a gateway (likely a VPN gateway or similar from the on-prem >> SD-WAN VNet >> route server setup), blocking the vWAN connection with UseRemoteGateways effectively enabled.

Steps:

Remove/detach the gateway from SD-WAN VNet (detach Route Server peering if possible, or migrate on-prem traffic via vWAN).
Add SD-WAN VNet as spoke to vWAN hub: vWAN > Virtual network connections > +Add connection (disable UseRemoteGateways), propagate to route table.
Configure BGP: Hub > Routing > BGP Peers > Add peer (Silver Peak IP/subnet, ASN 65515, multi-hop=2).

BGP Peering Steps for Silver Peak

Note vWAN hub BGP IPs from portal.
On Silver Peak appliance: Add BGP neighbors to those IPs (Microsoft ASN 65515), set multi-hop=2, static route to hub IPs via LAN gateway.
Verify: BGP session up, Azure routes learned on appliance, overlays in vWAN route table.

Official Doc:
Architecture: Virtual WAN and SD-WAN connectivity - Azure Virtual WAN | Microsoft Learn

Kindly let us know if the above helps or you need further assistance on this issue.

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Share via

Azure vWAN setup in SD-WAN vnet

1 answer

Your answer