Skip to content

Commit 9fc9ba6

Browse files
authored
Merge pull request #107624 from adstuart/patch-24
Update concepts-network-design-considerations.md
2 parents 6cf223b + 72b41ad commit 9fc9ba6

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

articles/azure-vmware/concepts-network-design-considerations.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,21 +14,20 @@ There are several networking considerations to review before you set up your Azu
1414

1515
## Azure VMware Solution compatibility with AS-Path Prepend
1616

17-
Azure VMware Solution is compatible with AS-Path Prepend for redundant ExpressRoute configurations, with the caveat of not honoring the outbound path selection from Azure toward on-premises. If you're running two or more ExpressRoute paths between on-premises and Azure, and you don't meet the listed [prerequisites](#prerequisites), you might experience impaired connectivity or no connectivity between your on-premises networks and Azure VMware Solution.
17+
Azure VMware Solution has considerations relating to the use of AS-Path Prepend for redundant ExpressRoute configurations. If you're running two or more ExpressRoute paths between on-premises and Azure, consider the following guidance for influencing traffic out of Azure VMware Solution towards your on-premises location via ExpressRoute GlobalReach.
1818

19-
The connectivity problem happens when Azure VMware Solution doesn't notice AS-Path Prepend and uses equal-cost multipath (ECMP) routing to send traffic toward your environment over both ExpressRoute circuits. That action causes problems with stateful firewall inspection.
19+
Due to asymmetric routing, connectivity issues can occur when Azure VMware Solution doesn't observe AS-Path Prepend and therefore uses equal-cost multipath (ECMP) routing to send traffic toward your environment over both ExpressRoute circuits. This behavior can cause problems with stateful firewall inspection devices placed behind existing ExpressRoute circuits.
2020

2121
### Prerequisites
2222

23-
For AS-Path Prepend, verify that all of the following listed connections are true:
23+
For AS-Path Prepend, consider the following:
2424

2525
> [!div class="checklist"]
26+
> * The key point is that you must prepend **Public** ASN numbers to influence how AVS route's traffic back to on-premises. If you prepend using _Private_ ASN, AVS will ignore the prepend, and the ECMP behavior above will occur. Even if you operate a Private BGP ASN on-premises, it's still possible to configure your on-premises devices to utilizes Public ASN when prepending routes outbound, to ensure compatibility with Azure VMware Solution.
2627
> * Both or all circuits are connected to Azure VMware Solution through ExpressRoute Global Reach.
2728
> * The same netblocks are being advertised from two or more circuits.
28-
> * Stateful firewalls are in the network path.
29-
> * You're using AS-Path Prepend to force Azure to prefer one path over others.
30-
31-
Use either 2-byte or 4-byte public ASN numbers, and make sure that they're compatible with Azure VMware Solution. If you don't own a public ASN for prepending, open a [Microsoft support ticket](https://ms.portal.azure.com/#view/Microsoft_Azure_Support/HelpAndSupportBlade/~/overview) to view options.
29+
> * You wish to use AS-Path Prepend to force Azure VMware solution to prefer one circuit over another.
30+
> * Use either 2-byte or 4-byte public ASN numbers. If you don't own a public ASN for prepending, open a [Microsoft support ticket](https://ms.portal.azure.com/#view/Microsoft_Azure_Support/HelpAndSupportBlade/~/overview) to explore further options.
3231
3332
## Management VMs and default routes from on-premises
3433

0 commit comments

Comments
 (0)