You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: This tutorial shows you how to create and provision ExpressRoute private and Microsoft peering using the Azure portal.
4
4
services: expressroute
5
5
author: duongau
6
-
7
6
ms.service: expressroute
8
7
ms.topic: tutorial
9
-
ms.date: 01/11/2021
8
+
ms.date: 07/13/2022
10
9
ms.author: duau
11
-
12
-
10
+
ms.custom: template-tutorial #Required; leave this attribute/value as-is.
13
11
---
14
12
# Tutorial: Create and modify peering for an ExpressRoute circuit using the Azure portal
15
13
@@ -39,7 +37,7 @@ In this tutorial, you learn how to:
39
37
*[Routing requirements](expressroute-routing.md)
40
38
*[Workflows](expressroute-workflows.md)
41
39
* You must have an active ExpressRoute circuit. Follow the instructions to [Create an ExpressRoute circuit](expressroute-howto-circuit-portal-resource-manager.md) and have the circuit enabled by your connectivity provider before you continue. To configure peering(s), the ExpressRoute circuit must be in a provisioned and enabled state.
42
-
* If you plan to use a shared key/MD5 hash, be sure to use the key on both sides of the tunnel. The limit is a maximum of 25 alphanumeric characters. Special characters are not supported.
40
+
* If you plan to use a shared key/MD5 hash, be sure to use the key on both sides of the tunnel. The limit is a maximum of 25 alphanumeric characters. Special characters aren't supported.
43
41
44
42
These instructions only apply to circuits created with service providers offering Layer 2 connectivity services. If you're using a service provider that offers managed Layer 3 services (typically an IPVPN, like MPLS), your connectivity provider configures and manages the routing for you.
45
43
@@ -64,15 +62,15 @@ This section helps you create, get, update, and delete the Microsoft peering con
64
62
65
63
**Circuit - Provider status: Not provisioned**
66
64
67
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/not-provisioned.png" alt-text="Screenshot that shows the Overview page for the ExpressRoute Demo Circuit with a red box highlighting the Provider status set to Not provisioned":::
65
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/not-provisioned.png" alt-text="Screenshot showing the Overview page for the ExpressRoute Demo Circuit with a red box highlighting the Provider status set to Not provisioned.":::
68
66
69
67
**Circuit - Provider status: Provisioned**
70
68
71
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/provisioned.png" alt-text="Screenshot that shows the Overview page for the ExpressRoute Demo Circuit with a red box highlighting the Provider status set to Provisioned":::
69
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/provisioned.png" alt-text="Screenshot that showing the Overview page for the ExpressRoute Demo Circuit with a red box highlighting the Provider status set to Provisioned.":::
72
70
73
71
2. Configure Microsoft peering for the circuit. Make sure that you have the following information before you continue.
74
72
75
-
* A pair of subnets owned by you and registered in an RIR/IRR. One subnet will be used for the primary link, while the other will be used for the secondary link. From each of these subnets, you will assign the first usable IP address to your router as Microsoft uses the second usable IP for its router. You have three options for this pair of subnets:
73
+
* A pair of subnets owned by you and registered in an RIR/IRR. One subnet will be used for the primary link, while the other will be used for the secondary link. From each of these subnets, you'll assign the first usable IP address to your router as Microsoft uses the second usable IP for its router. You have three options for this pair of subnets:
76
74
* IPv4: Two /30 subnets. These must be valid public IPv4 prefixes.
77
75
* IPv6: Two /126 subnets. These must be valid public IPv6 prefixes.
78
76
* Both: Two /30 subnets and two /126 subnets.
@@ -84,11 +82,11 @@ This section helps you create, get, update, and delete the Microsoft peering con
84
82
***Optional -** An MD5 hash if you choose to use one.
85
83
1. You can select the peering you wish to configure, as shown in the following example. Select the Microsoft peering row.
86
84
87
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/select-microsoft-peering.png" alt-text="Select the Microsoft peering row":::
85
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/select-microsoft-peering.png" alt-text="Screenshot showing how to select the Microsoft peering row.":::
88
86
89
87
4. Configure Microsoft peering. **Save** the configuration once you've specified all parameters. The following image shows an example configuration:
90
88
91
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/configuration-m-validation-needed.png" alt-text="Configure Microsoft peering validation needed":::
89
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/configuration-m-validation-needed.png" alt-text="Screenshot showing Microsoft peering configuration.":::
92
90
93
91
> [!IMPORTANT]
94
92
> Microsoft verifies if the specified 'Advertised public prefixes' and 'Peer ASN' (or 'Customer ASN') are assigned to you in the Internet Routing Registry. If you are getting the public prefixes from another entity and if the assignment is not recorded with the routing registry, the automatic validation will not complete and will require manual validation. If the automatic validation fails, you will see the message 'Validation needed'.
@@ -98,19 +96,19 @@ This section helps you create, get, update, and delete the Microsoft peering con
98
96
99
97
If your circuit gets to a **Validation needed** state, you must open a support ticket to show proof of ownership of the prefixes to our support team. You can open a support ticket directly from the portal, as shown in the following example:
100
98
101
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/ticket-portal-m.png" alt-text="Validation Needed - support ticket":::
99
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/ticket-portal-m.png" alt-text="Screenshot showing new support ticket request to submit proof of ownership for public prefixes.":::
102
100
103
101
### <aname="getmsft"></a>To view Microsoft peering details
104
102
105
103
You can view the properties of Microsoft peering by selecting the row for the peering.
106
104
107
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/view-peering-m.png" alt-text="View Microsoft peering properties":::
105
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/view-peering-m.png" alt-text="Screenshot showing how to view Microsoft peering properties.":::
108
106
109
107
### <aname="updatemsft"></a>To update Microsoft peering configuration
110
108
111
109
You can select the row for the peering that you want to modify, then modify the peering properties and save your modifications.
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/configuration-m.png" alt-text="Screenshot showing how to update Microsoft peering configuration.":::
114
112
115
113
## <aname="private"></a>Azure private peering
116
114
@@ -124,15 +122,15 @@ This section helps you create, get, update, and delete the Azure private peering
124
122
125
123
**Circuit - Provider status: Not provisioned**
126
124
127
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/not-provisioned.png" alt-text="Screenshot showing the Overview page for the ExpressRoute Demo Circuit with a red box highlighting the Provider status which is set to Not provisioned":::
125
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/not-provisioned.png" alt-text="Screenshot showing the Overview page for the ExpressRoute Demo Circuit with a red box highlighting the Provider status that is set to Not provisioned.":::
128
126
129
127
**Circuit - Provider status: Provisioned**
130
128
131
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/provisioned.png" alt-text="Screenshot showing the Overview page for the ExpressRoute Demo Circuit with a red box highlighting the Provider status which is set to Provisioned":::
129
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/provisioned.png" alt-text="Screenshot showing the Overview page for the ExpressRoute Demo Circuit with a red box highlighting the Provider status that is set to Provisioned.":::
132
130
133
131
2. Configure Azure private peering for the circuit. Make sure that you have the following items before you continue with the next steps:
134
132
135
-
* A pair of subnets that are not part of any address space reserved for virtual networks. One subnet will be used for the primary link, while the other will be used for the secondary link. From each of these subnets, you will assign the first usable IP address to your router as Microsoft uses the second usable IP for its router. You have three options for this pair of subnets:
133
+
* A pair of subnets that aren't part of any address space reserved for virtual networks. One subnet will be used for the primary link, while the other will be used for the secondary link. From each of these subnets, you'll assign the first usable IP address to your router as Microsoft uses the second usable IP for its router. You have three options for this pair of subnets:
136
134
* IPv4: Two /30 subnets.
137
135
* IPv6: Two /126 subnets.
138
136
* Both: Two /30 subnets and two /126 subnets.
@@ -142,32 +140,31 @@ This section helps you create, get, update, and delete the Azure private peering
142
140
***Optional -** An MD5 hash if you choose to use one.
143
141
3. Select the Azure private peering row, as shown in the following example:
144
142
145
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/select-private-peering.png" alt-text="Select the private peering row":::
143
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/select-private-peering.png" alt-text="Screenshot showing how to select the private peering row.":::
146
144
147
145
4. Configure private peering. **Save** the configuration once you've specified all parameters.
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/update-private-peering.png" alt-text="Screenshot showing how to update private peering configuration.":::
163
160
164
161
## Clean up resources
165
162
166
163
### <aname="deletemsft"></a>To delete Microsoft peering
167
164
168
165
You can remove your Microsoft peering configuration by right-clicking the peering and selecting **Delete** as shown in the following image:
169
166
170
-
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/delete-microsoft-peering.png" alt-text="Delete Microsoft peering":::
167
+
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/delete-microsoft-peering.png" alt-text="Screenshot showing how to delete Microsoft peering.":::
:::image type="content" source="./media/expressroute-howto-routing-portal-resource-manager/delete-private-peering.png" alt-text="Screenshot showing how to delete private peering.":::
0 commit comments