Skip to content

Commit 60b15a1

Browse files
authored
Update concepts-network-design-considerations.md
Clarify AS-prepend caveats for AVS
1 parent c8cb94a commit 60b15a1

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

articles/azure-vmware/concepts-network-design-considerations.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,21 +14,20 @@ There are several networking considerations to review before you set up your Azu
1414

1515
## Azure VMware Solution compatibility with AS-Path Prepend
1616

17-
Azure VMware Solution is compatible with AS-Path Prepend for redundant ExpressRoute configurations, with the caveat of not honoring the outbound path selection from Azure toward on-premises. If you're running two or more ExpressRoute paths between on-premises and Azure, and you don't meet the listed [prerequisites](#prerequisites), you might experience impaired connectivity or no connectivity between your on-premises networks and Azure VMware Solution.
17+
Azure VMware Solution has considerations relating to the use of AS-Path Prepend for redundant ExpressRoute configurations, please consider the following guidance when needing to influence traffic out of Azure VMware Solution towards your On-Premises location via ExpressRoute GlobalReach, if you're running two or more ExpressRoute paths between on-premises and Azure.
1818

19-
The connectivity problem happens when Azure VMware Solution doesn't notice AS-Path Prepend and uses equal-cost multipath (ECMP) routing to send traffic toward your environment over both ExpressRoute circuits. That action causes problems with stateful firewall inspection.
19+
Connectivity issues can occur, due to asymmetric routing, when Azure VMware Solution doesn't observe AS-Path Prepend and therefore uses equal-cost multipath (ECMP) routing to send traffic toward your environment over both ExpressRoute circuits. This behaviour can cause problems with stateful firewall inspection devices placed behind existing ExpressRoute circuits.
2020

2121
### Prerequisites
2222

23-
For AS-Path Prepend, verify that all of the following listed connections are true:
23+
For AS-Path Prepend, please consider the following:
2424

2525
> [!div class="checklist"]
26+
> * The key point is that you must prepend **Public** ASN numbers to influence how AVS route's traffic back to On-Premises. If you prepend using _Private_ ASN, AVS will ignore the prepend, and the ECMP behaviour above will occur. Please note that even if you operate a Private BGP ASN On-Premises, it is still possible to configure your On-Premises devices to utilises Public ASN when prepending routes outbound, to ensure compatibiliy with Azure VMware Solution.
2627
> * Both or all circuits are connected to Azure VMware Solution through ExpressRoute Global Reach.
2728
> * The same netblocks are being advertised from two or more circuits.
28-
> * Stateful firewalls are in the network path.
29-
> * You're using AS-Path Prepend to force Azure to prefer one path over others.
30-
31-
Use either 2-byte or 4-byte public ASN numbers, and make sure that they're compatible with Azure VMware Solution. If you don't own a public ASN for prepending, open a [Microsoft support ticket](https://ms.portal.azure.com/#view/Microsoft_Azure_Support/HelpAndSupportBlade/~/overview) to view options.
29+
> * You wish to use AS-Path Prepend to force Azure VMware solution to prefer one circuit over another.
30+
> * Use either 2-byte or 4-byte public ASN numbers. If you don't own a public ASN for prepending, open a [Microsoft support ticket](https://ms.portal.azure.com/#view/Microsoft_Azure_Support/HelpAndSupportBlade/~/overview) to explore further options.
3231
3332
## Management VMs and default routes from on-premises
3433

0 commit comments

Comments
 (0)