How to create BGP peering with virtual hub (Preview) - Azure portal

This article helps you configure an Azure Virtual WAN hub router to peer with a Network Virtual Appliance (NVA) in your virtual network using the Azure portal. The virtual hub router learns routes from the NVA in a spoke VNet that is connected to a virtual WAN hub. The virtual hub router also advertises the virtual network routes to the NVA. For more information, see Scenario: BGP peering with a virtual hub.

Important

This gated public preview is provided without a service-level agreement and shouldn't be used for production workloads. Certain features might not be supported, might have constrained capabilities, or might not be available in all Azure locations. For more information, see Supplemental Terms of Use for Microsoft Azure Previews.

Prerequisites

Important

The BGP peering with Virtual WAN hub feature is currently in gated public preview. If you are interested in trying this feature, please email previewbgpwithvhub@microsoft.com along with the Resource ID of your Virtual WAN resource.

To locate the Resource ID, open the Azure portal, navigate to your Virtual WAN resource, and click Settings > Properties > Resource ID.
Example: /subscriptions/<subscriptionID>/resourceGroups/<resourceGroupName>/providers/Microsoft.Network/virtualWans/<virtualWANname>

Verify that you have met the following criteria before beginning your configuration:

• You have an Azure subscription. If you don't have an Azure subscription, create a free account.

• You have a virtual network to which you want to connect.

  • Verify that none of the subnets of your on-premises networks overlap with the virtual networks that you want to connect to.
  • To create a virtual network in the Azure portal, see the Quickstart article.

• Your virtual network must not have any existing virtual network gateways.

  • If your virtual network already has gateways (VPN or ExpressRoute), you must remove all of the gateways before proceeding.
  • This configuration requires that virtual networks connect to the Virtual WAN hub gateway only.

• Decide the IP address range that you want to use for your virtual hub private address space. This information is used when configuring your virtual hub. A virtual hub is a virtual network that is created and used by Virtual WAN. It's the core of your Virtual WAN network in a region. The address space range must conform the certain rules:

  • The address range that you specify for the hub can't overlap with any of the existing virtual networks that you connect to.
  • The address range can't overlap with the on-premises address ranges that you connect to.
  • If you're unfamiliar with the IP address ranges located in your on-premises network configuration, coordinate with someone who can provide those details for you.

Create a virtual WAN

1. In the portal, in the Search resources bar, type Virtual WAN in the search box and select Enter.

2. Select Virtual WANs from the results. On the Virtual WANs page, select + Create to open the Create WAN page.

3. On the Create WAN page, on the Basics tab, fill in the fields. Modify the example values to apply to your environment.

   

   • Subscription: Select the subscription that you want to use.
   • Resource group: Create new or use existing.
   • Resource group location: Choose a resource location from the dropdown. A WAN is a global resource and doesn't live in a particular region. However, you must select a region in order to manage and locate the WAN resource that you create.
   • Name: Type the Name that you want to call your virtual WAN.
   • Type: Basic or Standard. Select Standard. If you select Basic, understand that Basic virtual WANs can only contain Basic hubs. Basic hubs can only be used for site-to-site connections.

4. After you finish filling out the fields, at the bottom of the page, select Review +Create.

5. Once validation passes, click Create to create the virtual WAN.

Create a hub

A hub is a virtual network that can contain gateways for site-to-site, ExpressRoute, or point-to-site functionality. Once the hub is created, you'll be charged for the hub, even if you don't attach any sites.

1. Go to the virtual WAN that you created. On the virtual WAN page left pane, under the Connectivity, select Hubs.

2. On the Hubs page, select +New Hub to open the Create virtual hub page.

   

3. On the Create virtual hub page Basics tab, complete the following fields:

   • Region: Select the region in which you want to deploy the virtual hub.
   • Name: The name by which you want the virtual hub to be known.
   • Hub private address space: The hub's address range in CIDR notation. The minimum address space is /24 to create a hub.
   • Virtual hub capacity: Select from the dropdown. For more information, see Virtual hub settings.
   • Hub routing preference: This field is only available as part of the virtual hub routing preference preview and can only be viewed in the preview portal. See Virtual hub routing preference for more information.

Connect the VNet to the hub

In this section, you create a connection between your hub and VNet.

1. Go to your Virtual WAN.

2. In the left pane, under Connectivity, select Virtual network connections.

3. On the Virtual network connections page, click +Add connection.

   

4. On the Add connection page, configure the required settings. For more information about routing settings, see About routing.

   

   • Connection name: Name your connection.
   • Hubs: Select the hub you want to associate with this connection.
   • Subscription: Verify the subscription.
   • Resource group: The resource group that contains the VNet.
   • Virtual network: Select the virtual network you want to connect to this hub. The virtual network you select can't have an already existing virtual network gateway.
   • Propagate to none: This is set to No by default. Changing the switch to Yes makes the configuration options for Propagate to Route Tables and Propagate to labels unavailable for configuration.
   • Associate Route Table: You can select the route table that you want to associate.
   • Static routes: You can use this setting to specify next hop.

5. Once you've completed the settings you want to configure, select Create to create the connection.

Configure a BGP peer

1. Open the Azure preview portal using https://aka.ms/azurecortexv2. The BGP peering with Virtual WAN hub feature is currently in managed preview and the configuration pages are not available in the regular Azure portal.

2. On the portal page for your virtual WAN, in the Connectivity section, select Hubs to view the list of hubs. Click a hub to configure a BGP peer.

   

3. On the Virtual Hub page, under the Routing section, select BGP Peers and click + Add to add a BGP peer.

   

4. On the Add BGP Peer page, complete all the fields.

   

   • Name – Resource name to identify a specific BGP peer.
   • ASN – The ASN for the BGP peer.
   • IPv4 address – The IPv4 address of the BGP peer.
   • Virtual Network connection – Choose the connection identifier that corresponds to the Virtual network that hosts the BGP peer.

5. Click Add to complete the BGP peer configuration and view the peer.

   

Modify a BGP peer

1. On the Virtual Hub resource, click BGP Peers and select the BGP peer. Click … then Edit.

   

2. Once the BGP peer is modified, click Add to save.

Delete a BGP peer

1. On the Virtual Hub resource, click BGP Peers and select the BGP peer. Click … then Delete.

   

Next steps

• For more information about BGP scenarios, see Scenario: BGP peering with a virtual hub.