You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/expressroute/expressroute-troubleshooting-expressroute-overview.md
+11-11Lines changed: 11 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -44,7 +44,7 @@ In the preceding diagram, the numbers indicate key network points:
44
44
45
45
At times, this article references these network points by their associated number.
46
46
47
-
Depending on the ExpressRoute connectivity model, network points 3 and 4 might be switches (Layer 2 devices) or routers (Layer 3 devices). The ExpressRoute connectivity models are cloud exchange co-location, point-to-point Ethernet connection, or any-to-any (IPVPN).
47
+
Depending on the ExpressRoute connectivity model, network points 3 and 4 might be switches (layer 2 devices) or routers (layer 3 devices). The ExpressRoute connectivity models are cloud exchange co-location, point-to-point Ethernet connection, or any-to-any (IPVPN).
48
48
49
49
In the direct connectivity model, there are no network points 3 and 4. Instead, CEs (2) are directly connected to MSEEs via dark fiber.
50
50
@@ -53,13 +53,13 @@ If the cloud exchange co-location, point-to-point Ethernet, or direct connectivi
53
53
If the any-to-any (IPVPN) connectivity model is used, PE-MSEEs (4) establish BGP peering with MSEEs (5). PE-MSEEs propagate the routes received from Microsoft back to the customer network via the IPVPN service provider network.
54
54
55
55
> [!NOTE]
56
-
> For high availability, Microsoft establishes a fully redundant parallel connectivity between MSEE/PE-MSEE pairs. A fully redundant parallel network path is also encouraged between the customer network and PE/CE pairs. For more information about high availability, see the article [Designing for high availability with ExpressRoute][HA].
56
+
> For high availability, Microsoft establishes a fully redundant parallel connectivity between MSEE and PE-MSEE pairs. A fully redundant parallel network path is also encouraged between the customer network and PE/CE pairs. For more information about high availability, see the article [Designing for high availability with ExpressRoute][HA].
57
57
58
58
The following sections represent the logical steps in troubleshooting an ExpressRoute circuit.
59
59
60
60
## Verify circuit provisioning and state
61
61
62
-
Provisioning an ExpressRoute circuit establishes a redundant Layer 2 connection between CEs/PE-MSEEs (2/4) and MSEEs (5). For more information on how to create, modify, provision, and verify an ExpressRoute circuit, see the article [Create and modify an ExpressRoute circuit][CreateCircuit].
62
+
Provisioning an ExpressRoute circuit establishes a redundant layer 2 connection between CEs/PE-MSEEs (2/4) and MSEEs (5). For more information on how to create, modify, provision, and verify an ExpressRoute circuit, see the article [Create and modify an ExpressRoute circuit][CreateCircuit].
63
63
64
64
>[!TIP]
65
65
>A service key uniquely identifies an ExpressRoute circuit. If you need assistance from Microsoft or from an ExpressRoute partner to troubleshoot an ExpressRoute issue, provide the service key to readily identify the circuit.
@@ -154,7 +154,7 @@ In the preceding example, Azure private peering is provisioned, but Azure public
154
154
> [!NOTE]
155
155
> If enabling a peering fails, check if the assigned primary and secondary subnets match the configuration on the linked CE/PE-MSEE. Also check if the correct `VlanId`, `AzureASN`, and `PeerASN` values are used on MSEEs, and if these values map to the ones used on the linked CE/PE-MSEE.
156
156
>
157
-
> If MD5 hashing is chosen, the shared key should be the same on MSEE and the PE-MSEE/CE pair. Previously configured shared keys would not be displayed for security reasons.
157
+
> If MD5 hashing is chosen, the shared key should be the same on MSEE and CE/PE-MSEE pairs. Previously configured shared keys would not be displayed for security reasons.
158
158
>
159
159
> If you need to change any of these configurations on an MSEE router, see [Create and modify routing for an ExpressRoute circuit][CreatePeering].
160
160
@@ -219,7 +219,7 @@ At line:1 char:1
219
219
> [!NOTE]
220
220
> If enabling a peering fails, check if the assigned primary and secondary subnets match the configuration on the linked CE/PE-MSEE. Also check if the correct `VlanId`, `AzureASN`, and `PeerASN` values are used on MSEEs, and if these values map to the ones used on the linked CE/PE-MSEE.
221
221
>
222
-
> If MD5 hashing is chosen, the shared key should be the same on MSEE and the PE-MSEE/CE pair. Previously configured shared keys would not be displayed for security reasons.
222
+
> If MD5 hashing is chosen, the shared key should be the same on MSEE and CE/PE-MSEE pairs. Previously configured shared keys would not be displayed for security reasons.
223
223
>
224
224
> If you need to change any of these configurations on an MSEE router, see [Create and modify routing for an ExpressRoute circuit][CreatePeering].
225
225
@@ -234,9 +234,9 @@ The Address Resolution Protocol (ARP) table provides a mapping of the IP address
234
234
* Mapping of the IP address for the ExpressRoute router interface to the MAC address
235
235
* Age of the mapping
236
236
237
-
ARP tables can help validate Layer 2 configuration and troubleshoot basic Layer 2 connectivity issues.
237
+
ARP tables can help validate layer 2 configuration and troubleshoot basic layer 2 connectivity issues.
238
238
239
-
To learn how to view the ARP table of an ExpressRoute peering and how to use the information to troubleshoot Layer 2 connectivity issues, see [Getting ARP tables in the Resource Manager deployment model][ARP].
239
+
To learn how to view the ARP table of an ExpressRoute peering and how to use the information to troubleshoot layer 2 connectivity issues, see [Getting ARP tables in the Resource Manager deployment model][ARP].
240
240
241
241
## Validate BGP and routes on the MSEE
242
242
@@ -269,7 +269,7 @@ Path : 123##
269
269
```
270
270
271
271
> [!NOTE]
272
-
> If the state of a eBGP peering between an MSEE and a CE/PE-MSEE is **Active** or **Idle**, check if the assigned primary and secondary peer subnets match the configuration on the linked CE/PE-MSEE. Also check if the correct `VlanId`, `AzureASN`, and `PeerASN` values are used on MSEEs, and if these values map to the ones used on the linked PE-MSEE/CE. If MD5 hashing is chosen, the shared key should be the same on MSEE and the CE/PE-MSEE pair. If you need to change any of these configurations on an MSEE router, see [Create and modify routing for an ExpressRoute circuit][CreatePeering].
272
+
> If the state of a eBGP peering between an MSEE and a CE/PE-MSEE is **Active** or **Idle**, check if the assigned primary and secondary peer subnets match the configuration on the linked CE/PE-MSEE. Also check if the correct `VlanId`, `AzureASN`, and `PeerASN` values are used on MSEEs, and if these values map to the ones used on the linked CE/PE-MSEE. If MD5 hashing is chosen, the shared key should be the same on MSEE and CE/PE-MSEE pairs. If you need to change any of these configurations on an MSEE router, see [Create and modify routing for an ExpressRoute circuit][CreatePeering].
273
273
274
274
> [!NOTE]
275
275
> If certain destinations are not reachable over a peering, check the route table of the MSEEs for the corresponding peering context. If a matching prefix (could be NATed IP) is present in the routing table, then check if any firewalls, network security groups, or access control lists (ACLs) on the path are blocking the traffic.
@@ -321,7 +321,7 @@ Test your private peering connectivity by counting packets arriving at and leavi
321
321
322
322
:::image type="content" source="./media/expressroute-troubleshooting-expressroute-overview/connectivity-issues.png" alt-text="Screenshot of the option for connectivity issues.":::
323
323
324
-
1. In the **Tell us more about the problem you are experiencing** dropdown list, select **Connectivity to Azure Private, Azure Public or Dynamics 365 services**.
324
+
1. In the **Tell us more about the problem you are experiencing** dropdown list, select **Connectivity to Azure Private, Azure Public or Dynamics 365 Services**.
325
325
326
326
:::image type="content" source="./media/expressroute-troubleshooting-expressroute-overview/tell-us-more.png" alt-text="Screenshot of the dropdown option for the problem that the user is experiencing.":::
327
327
@@ -339,7 +339,7 @@ Test your private peering connectivity by counting packets arriving at and leavi
339
339
340
340
When your results are ready, you'll have two sets of them for the primary and secondary MSEE devices. Review the number of matches in and out, and use the following scenarios to interpret the results:
341
341
342
-
***You see packet matches sent and received on both MSEEs**: This result indicates healthy traffic inbound to and outbound from the MSEE on your circuit. If loss is occurring either on-premises or in Azure, it's happening downstream from the MSEE.
342
+
***You see packet matches sent and received on both MSEEs**: This result indicates healthy traffic inbound to and outbound from the MSEEs on your circuit. If loss is occurring either on-premises or in Azure, it's happening downstream from the MSEEs.
343
343
***If you're testing PsPing from on-premises to Azure, received results show matches, but sent results show no matches**: This result indicates that traffic is coming in to Azure but isn't returning to on-premises. Check for return-path routing issues. For example, are you advertising the appropriate prefixes to Azure? Is a user-defined route (UDR) overriding prefixes?
344
344
***If you're testing PsPing from Azure to on-premises, sent results show no matches, but received results show matches**: This result indicates that traffic is coming in to on-premises but isn't returning to Azure. Work with your provider to find out why traffic isn't being routed to Azure via your ExpressRoute circuit.
345
345
***One MSEE shows no matches, but the other shows good matches**: This result indicates that one MSEE isn't receiving or passing any traffic. It might be offline (for example, BGP/ARP is down).
@@ -371,7 +371,7 @@ During a maintenance period, performance of the virtual network gateway might be
371
371
372
372
:::image type="content" source="./media/expressroute-troubleshooting-expressroute-overview/performance-issues.png" alt-text="Screenshot of selecting the option for performance issues.":::
373
373
374
-
1. Wait for the diagnostics to run and interpret the results:
374
+
1. Wait for the diagnostics to run and interpret the results.
375
375
376
376
:::image type="content" source="./media/expressroute-troubleshooting-expressroute-overview/gateway-result.png" alt-text="Screenshot of the diagnostic results.":::
0 commit comments