Hello Community, a short Question about VPN Gateway with active BGP Settings. I would like to connect 10 Local Network Gateways with Azure. 2 of this Connections with BGP and the Other 8 with normale static Routes. Must i use two Gateways for this use case or can i activate the BGP Settings on the Gateway and can decide if i want to use BGP on the local Connection or not? So can i use the same VPN Gateway for BGP Connections and VPN Connections without BGP? Thanks a lot. Best Regards, Phil

@PhilippGerber-6516 Thank you for your questions. First you can use your VPN Gateway for both connections: BGP and Non-BGP. https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq#can-i-mix-bgp-with-non-bgp-connections-for-my-azure-vpn-gateways Now, If you use BGP for a connection, leave the Address space field empty for the corresponding local network gateway resource. Azure VPN Gateway adds a host route internally to the on-premises BGP peer IP over the IPsec tunnel.

Azure VPN Gateway - BGP and without BGP

Accepted answer

Tchimwa Sougang 936 Reputation points Microsoft Employee

2022-06-28T13:40:50.827+00:00

@PhilippGerber-6516 Thank you for your questions.

First you can use your VPN Gateway for both connections: BGP and Non-BGP. https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq#can-i-mix-bgp-with-non-bgp-connections-for-my-azure-vpn-gateways
Now, If you use BGP for a connection, leave the Address space field empty for the corresponding local network gateway resource. Azure VPN Gateway adds a host route internally to the on-premises BGP peer IP over the IPsec tunnel.
Please sign in to rate this answer.
Philipp Gerber 251 Reputation points

2022-06-28T14:44:47.497+00:00

@Tchimwa Sougang

Thanks for your helpful Answer.

Philipp Gerber 251 Reputation points

2022-06-28T14:44:48.447+00:00

@Tchimwa Sougang

Thanks for your helpful Answer.

Tchimwa Sougang 936 Reputation points Microsoft Employee

2022-06-28T15:13:01.013+00:00

You're so welcome.

Philipp Gerber 251 Reputation points

2022-06-29T06:40:18.77+00:00

One more Question about this Topic.

When i Change BGP from Disabled to Enabled on a VPN Gateway with Connected VPN Connections.

Does it disconnect and reconnect active connections?

And must i delete all the connections before i can change the BGP Settings at the VPN Gateway?

GitaraniSharma-MSFT 49,401 Reputation points Microsoft Employee

2022-07-01T10:46:02.21+00:00

Hello @PhilippGerber-6516 ,

There will be a downtime when you configure BGP on an existing setup because you need to remove the existing local network address spaces from your local network gateway. So, it will disconnect the active connection and reconnect once the configuration is complete on both Azure and on-prem side.
Refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-bgp-overview#what-should-i-specify-as-my-address-prefixes-for-the-local-network-gateway-when-i-use-bgp

You don't need to delete all the connections before you change the BGP Settings at the VPN Gateway. Once you enable BGP on the VPN gateway and local network gateway, you can enable BGP on your existing connections.
Refer : https://learn.microsoft.com/en-us/azure/vpn-gateway/bgp-howto#to-update-an-existing-connection

NOTE : Before enabling BGP on a connection, the local network gateway must have its ASN and BgpPeeringAddress specified in BgpSettings.

So, below are the things you need to consider:

There will be a downtime, so make the changes during a scheduled maintenance window.

Enable the BGP on the VPN gateway.

Configure BGP on your on-premises VPN device.

Configure BGP settings on your local network gateway and remove the existing local network address spaces.

Enable BGP on your VPN connection.

Regards,
Gita

Philipp Gerber 251 Reputation points

2022-07-01T10:59:55.837+00:00

Thanks a lot for your Answer.

The Important thing is that i have no downtime when i dont would like to change an existing local Network connection.
i will use BGP for the new Connections but with the Same Gateway.

Regards,
Phil
Sign in to comment

Share via

Azure VPN Gateway - BGP and without BGP

0 additional answers