Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
2,812 questions
3 answers
Diagnostic Settings for Microsoft.Network/expressRouteGateways support
I have set up a expressRouteGateway@2021-02-01 connected to a Virtual Hub @ 2020-11-01 and trying to configure diagnostic settings to forward metrics to a log analytics workspace. According to this…
asked 2021-10-12T14:05:37.96+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 72%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EME%3C/text%3E%3C/svg%3E)
Mats Estensen
26
Reputation points
commented 2022-11-11T15:34:38.117+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 69%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Steve Down
96
Reputation points
1 answer
One of the answers was accepted by the question author.
Internet acces via vWAN Azure
Hi ,I have VPN Gateway + private APN from Orange without Internet access, it connects to the Azure s2s ipsec tunnel. Sometimes I need to release Internet traffic on Orange SIM cards and I wanted to do it using vWan and Virtual Hub but I came to the…
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 36%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EW%3C/text%3E%3C/svg%3E)
0 answers
P2S VPN not providing correct IP over WAN
I've been following the documenation here regarding P2S setups over a WAN. https://learn.microsoft.com/en-us/azure/virtual-wan/user-groups-create I've created the WAN itself, alongside the user VPN connections and can connect into the address space…
asked 2022-10-28T16:26:04.57+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 6%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJP%3C/text%3E%3C/svg%3E)
James Pearce
1
Reputation point
commented 2022-11-04T17:11:25.927+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
ChaitanyaNaykodi-MSFT
23,031
Reputation points Microsoft Employee
1 answer
VWAN HUB2 does not distribute Branch routes to directly connected VNETs when Branch is connected to S2S VPN GW in VWAN HUB1
Hi! A simplified topology is below: When all VPN links are up both HUBs and both VNETs are receiving routes from DC1 and DC2. If I bring the HUB02--DC2 tunnel down the USEast2 VNET loses all DC1/2 routes although both HUB01 and HUB02…
asked 2022-11-02T22:06:48.477+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 31%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL%3C/text%3E%3C/svg%3E)
LevS
1
Reputation point
answered 2022-11-04T16:38:56.96+00:00
KapilAnanth-MSFT
35,251
Reputation points Microsoft Employee
0 answers
Default Route with next-hop type as VPN_S2S_Gateway missing from Effective Routes
I have setup a vWAN with One HUB inside. In addition, two VPN gateways have been configured as Site-to-Site to connect with On-premise Gateway. I have already attached the required vNET to this hub and vNET subnet is visible on my on-premise gateway,…
asked 2022-11-04T07:12:38.163+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 68%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETR%3C/text%3E%3C/svg%3E)
Tyagi, Rahul (Nokia - SG/Singapore)
1
Reputation point
commented 2022-11-04T16:09:17.96+00:00
GitaraniSharma-MSFT
47,676
Reputation points Microsoft Employee
4 answers
Cross-tenant VNET connection with vWAN does not work as expected
Hi All, We are trying to configure Connect cross-tenant virtual networks to a Virtual WAN hub based on the official guide: https://learn.microsoft.com/en-us/azure/virtual-wan/cross-tenant-vnet The connection provisioning succeeds, the peering…
asked 2022-11-03T14:57:53.207+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 1%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
snadhazi_ng
106
Reputation points
answered 2022-11-04T08:49:45.73+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 49%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMT%3C/text%3E%3C/svg%3E)
Marek Tarnoci
1
Reputation point
2 answers
One of the answers was accepted by the question author.
Thinking about which azure network topology in my case !!
Hello , we have a datacenter head office and small datancenters for branch offices in the world and only one azure subscription we have an only one vnet in this subscription linked via vpn gateway to the datacenter head office .for billing…
asked 2022-10-26T13:40:30.647+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 65%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
APTOS
221
Reputation points
commented 2022-10-28T10:21:36.137+00:00
Andreas Baumgarten
96,926
Reputation points MVP
1 answer
Azure P2S VPN gateway setting restrict access for Azure AD groups
We have a several P2S gateways to different vWAN and virtual hubs, authenticate against the Azure AD - connect through the Azure VPN client. Is there anyway (or nearby future plan to support) to restrict the access to each gateway for specific Azure AD…
asked 2022-10-17T05:38:52.7+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 77%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELM%3C/text%3E%3C/svg%3E)
Loc Mai
1
Reputation point
answered 2022-10-21T08:57:15.487+00:00
KapilAnanth-MSFT
35,251
Reputation points Microsoft Employee
1 answer
One of the answers was accepted by the question author.
Info about custom routing and UDRs with Azure Firewall and VPN gateway transit in a hub & spoke model
Hi everyone, I have configured an architecture in my lab as follows: From the left in the hub network I deployed an Azure Firewall because all traffic must go through. The hub network on the right is on another Subscription, specifically…
asked 2022-09-30T20:48:27.893+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(304, 16%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDD%3C/text%3E%3C/svg%3E)
Denis Dal Molin
51
Reputation points
accepted 2022-10-06T17:13:49.15+00:00
Denis Dal Molin
51
Reputation points
2 answers
vWan in the same Region
strong text
asked 2022-01-30T17:10:56.353+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(16, 89%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Pierrick Morel
1
Reputation point
answered 2022-09-23T13:43:44.877+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 79%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Adam Stateman
1
Reputation point
1 answer
One of the answers was accepted by the question author.
Can I connect a virtual hub to an VNet with VPN Gateway?
For my current assignment we planning to migrate from a traditional hub/spoke model to VWAN. The current hub VNet contains a site-to-site VPN gateway which allows connectivity to on-prem. Our plan is to create a VNet Connection between the current…
asked 2022-09-16T08:38:04.293+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 24%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMD%3C/text%3E%3C/svg%3E)
Matthijs de Beer
61
Reputation points
accepted 2022-09-19T06:56:12.797+00:00
Matthijs de Beer
61
Reputation points
0 answers
Requirement of Peering between vWAN hub and Hub vNET to migrate the existing gateway to vWAN
Hi Experts, we need suggestions on best practices to migrate the S2S tunnels from VPN gateway to vWAN hub with minimal downtime. our plan is to use existing Hub as shared services vNET and peer with vWAN hub. we were able to form parallel tunnels on…
asked 2022-08-24T16:52:30.89+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(60.8, 43%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBR%3C/text%3E%3C/svg%3E)
Balla, Rajesh
1
Reputation point
commented 2022-09-12T10:48:13.93+00:00
GitaraniSharma-MSFT
47,676
Reputation points Microsoft Employee
1 answer
Azure S2S VPN Perfect Forward Secrecy always negotiated as "None"
Hello folks, First time asking a question so please forgive me if I forgot to put enough information or formatting is wrong. I am trying to better understand limitations of Azure S2S VPN, namely the PFS and wanted to check if someone encountered…
asked 2022-09-06T11:36:43.787+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 1%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC8%3C/text%3E%3C/svg%3E)
confusedfish-8493
1
Reputation point
answered 2022-09-06T18:28:26.9+00:00
ChaitanyaNaykodi-MSFT
23,031
Reputation points Microsoft Employee
1 answer
Virtual WAN
Good afternoon community nice to say hello, I want to delete an Azure Virtual WAN instance, it has no dependencies and still does not give me the option to delete even when I put yes in the confirmation. Thanks for your help. Cheers..
asked 2022-09-02T18:46:50.28+00:00
Heiler Matos
1
Reputation point
answered 2022-09-03T22:45:50.033+00:00
ChaitanyaNaykodi-MSFT
23,031
Reputation points Microsoft Employee
1 answer
How do I connect two Virtual Network Gateways between them
Scenario. I have a Virtual Network Gateway sku VPnGw1 that has limit the 30 S2S connections. I don´t want to upgrade the Sku. I want to create another Virtual Network Gateway and connect them. First is this the right choice? How can I connect…
asked 2022-08-30T16:17:09.787+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 73%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERB%3C/text%3E%3C/svg%3E)
Roland Barreto
66
Reputation points
answered 2022-08-30T16:37:14.95+00:00
JimmySalian-2011
41,921
Reputation points
1 answer
Related to Redirecting or Rerouting My url
So, I've a Url call it myurl with port 11 with azure Vm. I Want My Users to Enter the Url without Port. Like Hiding My Port or Whatever You from Front End But Calling url:11 from Backend!
asked 2022-08-21T08:42:56.823+00:00
abrahimzaman360
1
Reputation point
commented 2022-08-22T08:37:52.357+00:00
KapilAnanth-MSFT
35,251
Reputation points Microsoft Employee
1 answer
Can I "migrate" virtual wan to VPN gateway?
Hey everyone We have Azure WAN configured but it's too expansive and we would like to use just the VPN gateway. Can I migrate the Virtual WAN resources to the VPN gateway?
asked 2022-08-19T14:53:54.47+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 83%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELR%3C/text%3E%3C/svg%3E)
Leandro Rampanelli
1
Reputation point
answered 2022-08-22T06:20:30.07+00:00
KapilAnanth-MSFT
35,251
Reputation points Microsoft Employee
1 answer
Palo Alto VM Series Firewall with Azure Virtual WAN Hub
Hey all. I am looking to leverage a PaloAlto VM Series firewall to secure an ExpressRoute circuit. Because a PaloAlto cannot be directly integrated with a Virtual WAN hub, I need a workaround. I would like to avoid using peering if possible as the client…
asked 2021-06-24T22:28:15.943+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 16%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
cloudyday88
1
Reputation point
commented 2022-08-17T11:22:18.417+00:00
Aditya Kumar Gupta
1
Reputation point
3 answers
vWAN P2S VPN - unable to limit network traffic with Azure firewall
Original Issue: https://github.com/MicrosoftDocs/azure-docs/issues/95864 So I've followed the article and deployed a P2S VPN in vWAN with an existing vWan, hub and spoke vnets. I deployed a P2S gateway to an existing virtual hub. The vWAN is…
asked 2022-07-21T07:29:19.57+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(57.599999999999994, 35%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Audun Solemdal
6
Reputation points
commented 2022-08-12T15:08:38.793+00:00
GitaraniSharma-MSFT
47,676
Reputation points Microsoft Employee
1 answer
Can vNET spoke to vNET spoke traffic be routed through an Azure Firewall deployed into a dedicated security spoke?
I am working on a virtual wan deployment for a client and came across this scenario. The client would like to use vWAN with two hubs in separate Azure regions. There would be various application and identity spokes connected to the virtual hubs. There is…
asked 2022-06-14T23:30:36.633+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 34%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAR%3C/text%3E%3C/svg%3E)
Aaron Rosedale
1
Reputation point
answered 2022-08-09T15:23:28.697+00:00
Joe Carlyle
661
Reputation points MVP