Skip to content

Commit 939f8c3

Browse files
authored
Update vpn-gateway-faq-bgp-include.md
gateway transit enabled/not enabled inclusion in prefix advertising for S2S scenarios.
1 parent 2ac2bb6 commit 939f8c3

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

includes/vpn-gateway-faq-bgp-include.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -86,11 +86,12 @@ Azure VPN Gateway supports up to 4,000 prefixes. The BGP session is dropped if t
8686

8787
Yes. Keep in mind that advertising the default route forces all VNet egress traffic toward your on-premises site. It also prevents the virtual network VMs from accepting public communication from the internet directly, such as Remote Desktop Protocol (RDP) or Secure Shell (SSH) from the internet to the VMs.
8888

89-
### Can I advertise the exact prefixes as my virtual network prefixes?
89+
### In site-to-site tunnel setups, can I advertise the exact prefixes as my virtual network prefixes?
9090

91-
No. Azure blocks or filters advertisement of the same prefixes as any one of your VNet address prefixes. You can, however, advertise a prefix that's a superset of what you have inside your virtual network.
91+
The ability to advertise exact prefixes depends on whether gateway transit is enabled or not enabled.
9292

93-
For example, if your virtual network uses the address space 10.0.0.0/16, you can advertise 10.0.0.0/8. But you can't advertise 10.0.0.0/16 or 10.0.0.0/24.
93+
* **When gateway transit is enabled:** You cannot advertise the exact prefixes as your virtual network (including peered virtual networks) prefixes. Azure blocks or filters the advertisement of any prefixes that match your virtual network address prefixes. However, you can advertise a prefix that is a superset of your virtual network's address space. For example, if your virtual network uses the address space 10.0.0.0/16, you can advertise 10.0.0.0/8, but not 10.0.0.0/16 or 10.0.0.0/24.
94+
* **When gateway transit is not enabled:** The gateway does not learn peered virtual network prefixes, allowing you to advertise the exact prefixes as your peered virtual network.
9495

9596
### Can I use BGP with my connections between virtual networks?
9697

0 commit comments

Comments
 (0)