I am building a proof of concept architecture using Azure VWAN and having issues routing internal private traffic between branches.
For sake of simplicity I will include only the parts of the infrastructure that are relevant to the problem.
The infra consists of:
1. Azure VWAN instance
2. One Virtual Hub inside the VWAN (customer-vhub) with an S2S VPN Gateway
3. First internal virtual network (internal-vnet) containing one VM (internal-vnet VM)
4. Second virtual network (customer-site-vnet) containing one VM (customer-site VM) and a Virtual Network Gateway (customer-site GW)
5. Virtual Network Connection between the customer-vhub and the internal-vnet
6. Site to Site connection between the customer-vhub and the customer-site-vnet
7. Local Network Gateway which represents the VPN GW of the Virtual Hub (this is needed since you cannot directly S2S connect a regulat VNET Gateway and a Virtual Hub Gateway with an S2S connection)
Diagram of architecture:
I realise the connection between the customer-site-vnet and the customer-vhub could've been done with a Virtual Network Connection, but since this is a Proof of Concept & testing architecture, I wanted to mimick a setup where the connection to a customer would be an actual S2S connection.
The S2S connection is successful and says 'connected'. I also set up BGP so the routes get propagated across the network.
The problem: the internal-vnet VM is not reachable from the customer-site VM.
How I've tested: I've assigned the customer-site VM a public IP and SSH-ed into it and try SSH-ing into the private IP of the internal-vnet VM, but to no avail.
What I've tried:
- whitelisting outbound traffic in the NSG of the customer-site VM
- manually adding some routes to the VM
- checked Network Watcher for connection between the two VMs, issue that turns up is 'no route'
All in all it seems that the networks, while successfully connected, are not propagating proper routes for the traffic to take between the branches.
What part of the setup am I missing or did incorrectly?
Thanks in advance!