I have a couple of VPN tunnels setup in the VPN gateway that are not working properly and I am not sure if this has to do with the Express route connection we setup a few months ago. We had no need to use the VPN gateway tunnels but now we are in need to set those up but it seems we are not getting the routes in the inside networks coming from the VPN gateway and therefore we can't communicate to the VPNs. The express route is working well without any issues.
Hello @AndradeIvan-5309 ,
Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.
I understand that you have VPN and ExpressRoute setup for your on-premises connectivity to Azure and when ExpressRoute is in place, VPN tunnels are not working.
Could you please provide the below details for further investigation?
1) Are you using ExpressRoute and Site-to-Site coexisting connections?
2) Is the Site-to-Site VPN used as a secure failover path/backup for ExpressRoute?
If Site-to-Site VPN is used as a failover path for ExpressRoute and both have same routes configured, then ExpressRoute circuit is preferred over Site-to-Site VPN. The ExpressRoute circuit is always the primary link. Data flows through the Site-to-Site VPN path only if the ExpressRoute circuit fails.
However, if different routes are used/specific routes are present in either of the connection, Azure will use the longest prefix match to choose the route towards the packet's destination.
Refer : https://docs.microsoft.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portal
Regards,
Gita
Hello @AndradeIvan-5309 ,
Could you please provide an update on this post and share the requested details for further discussion?
Regards,
Gita
Hello @AndradeIvan-5309 , Could you please provide an update on this post?
9 people are following this question.
