Skip to content

Commit d384d58

Browse files
committed
Advertised Prefix Validation Warning added
1 parent a7dcb2b commit d384d58

File tree

3 files changed

+87
-49
lines changed

3 files changed

+87
-49
lines changed

articles/expressroute/expressroute-howto-routing-arm.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -117,6 +117,13 @@ This section helps you create, get, update, and delete the Microsoft peering con
117117
* Customer ASN: If you are advertising prefixes that are not registered to the peering AS number, you can specify the AS number to which they are registered.
118118
* An MD5 hash if you choose to use one.
119119

120+
> [!IMPORTANT]
121+
> Microsoft verifies if the specified 'Advertised public prefixes' and 'Peer ASN' (or 'Customer ASN') are assigned to you in the Internet Routing Registry. If you are getting the public prefixes from another entity and if the assignment is not recorded with the routing registry, the automatic validation will not complete and will require manual validation. If the automatic validation fails, you will see 'AdvertisedPublicPrefixesState' as 'Validation needed' on the output of "Get-AzExpressRouteCircuitPeeringConfig" (see "To get Microsoft peering details" below) command.
122+
>
123+
> If you see the message 'Validation needed', collect the document(s) that show the public prefixes are assigned to your organization by the entity that is listed as the owner of the prefixes in the routing registry and submit these documents for manual validation by opening a support ticket as shown below.
124+
>
125+
>
126+
120127
Use the following example to configure Microsoft peering for your circuit:
121128

122129
```azurepowershell-interactive

articles/expressroute/expressroute-howto-routing-portal-resource-manager.md

Lines changed: 74 additions & 49 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,13 @@
11
---
22
title: 'Configure peering for a circuit - ExpressRoute: Azure | Microsoft Docs'
33
description: This article documents the steps for creating and provisioning ExpressRoute private and Microsoft peering. This article also demonstrates how to check the status, update, or delete peerings for a circuit.
4+
45
services: expressroute
56
author: mialdrid
67

78
ms.service: expressroute
89
ms.topic: conceptual
9-
ms.date: 06/28/2019
10+
ms.date: 05/20/2019
1011
ms.author: mialdrid
1112
ms.custom: seodec18
1213

@@ -51,17 +52,9 @@ This section helps you create, get, update, and delete the Microsoft peering con
5152
5253
### To create Microsoft peering
5354

54-
1. Configure the ExpressRoute circuit. Check the **Provider status** to ensure that the circuit is fully provisioned by the connectivity provider before continuing further.
55-
56-
If your connectivity provider offers managed Layer 3 services, you can ask your connectivity provider to enable Microsoft peering for you. In that case, you won't need to follow the instructions listed in the next sections. However, if your connectivity provider does not manage routing for you, after creating your circuit, proceed with these steps.
57-
58-
**Circuit - Provider status: Not provisioned**
59-
60-
[![](./media/expressroute-howto-routing-portal-resource-manager/not-provisioned-m.png "Provider status: Not provisioned")](./media/expressroute-howto-routing-portal-resource-manager/not-provisioned-m-lightbox.png#lightbox)
61-
62-
**Circuit - Provider status: Provisioned**
55+
1. Configure the ExpressRoute circuit. Ensure that the circuit is fully provisioned by the connectivity provider before continuing further. If your connectivity provider offers managed Layer 3 services, you can ask your connectivity provider to enable Microsoft peering for you. In that case, you won't need to follow the instructions listed in the next sections. However, if your connectivity provider does not manage routing for you, after creating your circuit, proceed with the next steps.
6356

64-
[![](./media/expressroute-howto-routing-portal-resource-manager/provisioned-m.png "Provider status = Provisioned")](./media/expressroute-howto-routing-portal-resource-manager/provisioned-m-lightbox.png#lightbox)
57+
![list Microsoft peering](./media/expressroute-howto-routing-portal-resource-manager/listprovisioned.png)
6558
2. Configure Microsoft peering for the circuit. Make sure that you have the following information before you proceed.
6659

6760
* A /30 subnet for the primary link. This must be a valid public IPv4 prefix owned by you and registered in an RIR / IRR. From this subnet you will assign the first useable IP address to your router as Microsoft uses the second useable IP for its router.
@@ -74,83 +67,87 @@ This section helps you create, get, update, and delete the Microsoft peering con
7467
* **Optional -** An MD5 hash if you choose to use one.
7568
3. You can select the peering you wish to configure, as shown in the following example. Select the Microsoft peering row.
7669

77-
[![Select the Microsoft peering row](./media/expressroute-howto-routing-portal-resource-manager/select-peering-m.png "Select the Microsoft peering row")](./media/expressroute-howto-routing-portal-resource-manager/select-peering-m-lightbox.png#lightbox)
78-
4. Configure Microsoft peering. **Save** the configuration once you have specified all parameters. The following image shows an example configuration:
70+
![select Microsoft peering row](./media/expressroute-howto-routing-portal-resource-manager/rmicrosoft1.png)
71+
4. Configure Microsoft peering. The following image shows a configuration example:
7972

80-
![Configure Microsoft peering](./media/expressroute-howto-routing-portal-resource-manager/configuration-m.png)
73+
![configure Microsoft peering](./media/expressroute-howto-routing-portal-resource-manager/rmicrosoft2.png)
74+
5. Save the configuration once you have specified all parameters.
8175

82-
If your circuit gets to a 'Validation needed' state, you must open a support ticket to show proof of ownership of the prefixes to our support team. You can open a support ticket directly from the portal, as shown in the following example:
76+
> [!IMPORTANT]
77+
> Microsoft verifies if the specified 'Advertised public prefixes' and 'Peer ASN' (or 'Customer ASN') are assigned to you in the Internet Routing Registry. If you are getting the public prefixes from another entity and if the assignment is not recorded with the routing registry, the automatic validation will not complete and will require manual validation. If the automatic validation fails, you will see the message 'Validation needed'.
78+
>
79+
> If you see the message 'Validation needed', collect the document(s) that show the public prefixes are assigned to your organization by the entity that is listed as the owner of the prefixes in the routing registry and submit these documents for manual validation by opening a support ticket as shown below.
80+
>
81+
>
8382
84-
![Validation Needed - support ticket](./media/expressroute-howto-routing-portal-resource-manager/ticket-portal-m.png)
83+
If your circuit gets to a 'Validation needed' state (as shown in the image), you must open a support ticket to show proof of ownership of the prefixes to our support team.
8584

86-
5. After the configuration has been accepted successfully, you'll see something similar to the following image:
85+
![Save Microsoft peering configuration](./media/expressroute-howto-routing-portal-resource-manager/rmicrosoft5.png)
8786

88-
![Peering status: Configured](./media/expressroute-howto-routing-portal-resource-manager/configured-m.png "Peering status: Configured")]
87+
You can open a support ticket directly from the portal, as shown in the following example:
88+
89+
![](./media/expressroute-howto-routing-portal-resource-manager/rmicrosoft6.png)
90+
91+
92+
1. After the configuration has been accepted successfully, you'll see something similar to the following image:
93+
94+
![](./media/expressroute-howto-routing-portal-resource-manager/rmicrosoft7.png)
8995

9096
### <a name="getmsft"></a>To view Microsoft peering details
9197

92-
You can view the properties of Microsoft peering by selecting the row for the peering.
98+
You can view the properties of Microsoft peering by selecting the peering.
99+
100+
![](./media/expressroute-howto-routing-portal-resource-manager/rmicrosoft3.png)
93101

94-
[![View Microsoft peering properties](./media/expressroute-howto-routing-portal-resource-manager/view-peering-m.png "View properties")](./media/expressroute-howto-routing-portal-resource-manager/view-peering-m-lightbox.png#lightbox)
95102
### <a name="updatemsft"></a>To update Microsoft peering configuration
96103

97-
You can select the row for the peering that you want to modify, then modify the peering properties and save your modifications.
104+
You can select the row for peering and modify the peering properties.
98105

99-
![Select peering row](./media/expressroute-howto-routing-portal-resource-manager/update-peering-m.png)
106+
![](./media/expressroute-howto-routing-portal-resource-manager/rmicrosoft7.png)
100107

101108
### <a name="deletemsft"></a>To delete Microsoft peering
102109

103-
You can remove your peering configuration by clicking the delete icon, as shown in the following image:
110+
You can remove your peering configuration by selecting the delete icon, as shown in the following image:
104111

105-
![Delete peering](./media/expressroute-howto-routing-portal-resource-manager/delete-peering-m.png)
112+
![](./media/expressroute-howto-routing-portal-resource-manager/rmicrosoft4.png)
106113

107114
## <a name="private"></a>Azure private peering
108115

109116
This section helps you create, get, update, and delete the Azure private peering configuration for an ExpressRoute circuit.
110117

111118
### To create Azure private peering
112119

113-
1. Configure the ExpressRoute circuit. Ensure that the circuit is fully provisioned by the connectivity provider before continuing.
114-
115-
If your connectivity provider offers managed Layer 3 services, you can ask your connectivity provider to enable Azure private peering for you. In that case, you won't need to follow the instructions listed in the next sections. However, if your connectivity provider does not manage routing for you, after creating your circuit, proceed with the next steps.
116-
117-
**Circuit - Provider status: Not provisioned**
118-
119-
[![](./media/expressroute-howto-routing-portal-resource-manager/not-provisioned-p.png "Provider status = Not Provisioned")](./media/expressroute-howto-routing-portal-resource-manager/not-provisioned-p-lightbox.png#lightbox)
120-
121-
**Circuit - Provider status: Provisioned**
122-
123-
[![](./media/expressroute-howto-routing-portal-resource-manager/provisioned-p.png "Provider Status = Provisioned")](./media/expressroute-howto-routing-portal-resource-manager/provisioned-p-lightbox.png#lightbox)
120+
1. Configure the ExpressRoute circuit. Ensure that the circuit is fully provisioned by the connectivity provider before continuing. If your connectivity provider offers managed Layer 3 services, you can ask your connectivity provider to enable Azure private peering for you. In that case, you won't need to follow the instructions listed in the next sections. However, if your connectivity provider does not manage routing for you, after creating your circuit, proceed with the next steps.
124121

122+
![list](./media/expressroute-howto-routing-portal-resource-manager/listprovisioned.png)
125123
2. Configure Azure private peering for the circuit. Make sure that you have the following items before you proceed with the next steps:
126124

127125
* A /30 subnet for the primary link. The subnet must not be part of any address space reserved for virtual networks. From this subnet you will assign the first useable IP address to your router as Microsoft uses the second useable IP for its router.
128126
* A /30 subnet for the secondary link. The subnet must not be part of any address space reserved for virtual networks. From this subnet you will assign the first useable IP address to your router as Microsoft uses the second useable IP for its router.
129127
* A valid VLAN ID to establish this peering on. Ensure that no other peering in the circuit uses the same VLAN ID. For both Primary and Secondary links you must use the same VLAN ID.
130128
* AS number for peering. You can use both 2-byte and 4-byte AS numbers. You can use a private AS number for this peering except for the number from 65515 to 65520, inclusively.
131-
* You must advertise the routes from your on-premises Edge router to Azure via BGP when you set up the private peering.
132129
* **Optional -** An MD5 hash if you choose to use one.
133-
3. Select the Azure private peering row, as shown in the following example:
130+
3. Select the Azure Private peering row, as shown in the following example:
134131

135-
[![Select the private peering row](./media/expressroute-howto-routing-portal-resource-manager/select-peering-p.png "Select the private peering row")](./media/expressroute-howto-routing-portal-resource-manager/select-peering-p-lightbox.png#lightbox)
136-
4. Configure private peering. **Save** the configuration once you have specified all parameters.
132+
![private](./media/expressroute-howto-routing-portal-resource-manager/rprivate1.png)
133+
4. Configure private peering. The following image shows a configuration example:
137134

138-
![configure private peering](./media/expressroute-howto-routing-portal-resource-manager/configuration-p.png)
139-
5. After the configuration has been accepted successfully, you see something similar to the following example:
135+
![configure private peering](./media/expressroute-howto-routing-portal-resource-manager/rprivate2.png)
136+
5. Save the configuration once you have specified all parameters. After the configuration has been accepted successfully, you see something similar to the following example:
140137

141-
![saved private peering](./media/expressroute-howto-routing-portal-resource-manager/save-p.png)
138+
![save private peering](./media/expressroute-howto-routing-portal-resource-manager/rprivate3.png)
142139

143140
### <a name="getprivate"></a>To view Azure private peering details
144141

145142
You can view the properties of Azure private peering by selecting the peering.
146143

147-
[![View private peering properties](./media/expressroute-howto-routing-portal-resource-manager/view-p.png "View private peering properties")](./media/expressroute-howto-routing-portal-resource-manager/view-p-lightbox.png#lightbox)
144+
![view private peering](./media/expressroute-howto-routing-portal-resource-manager/rprivate3.png)
148145

149146
### <a name="updateprivate"></a>To update Azure private peering configuration
150147

151-
You can select the row for peering and modify the peering properties. After updating, save your changes.
148+
You can select the row for peering and modify the peering properties.
152149

153-
![update private peering](./media/expressroute-howto-routing-portal-resource-manager/update-peering-p.png)
150+
![update private peering](./media/expressroute-howto-routing-portal-resource-manager/rprivate2.png)
154151

155152
### <a name="deleteprivate"></a>To delete Azure private peering
156153

@@ -161,7 +158,7 @@ You can remove your peering configuration by selecting the delete icon, as shown
161158
>
162159
>
163160
164-
![delete private peering](./media/expressroute-howto-routing-portal-resource-manager/delete-p.png)
161+
![delete private peering](./media/expressroute-howto-routing-portal-resource-manager/rprivate4.png)
165162

166163
## <a name="public"></a>Azure public peering
167164

@@ -171,17 +168,45 @@ This section helps you create, get, update, and delete the Azure public peering
171168
> Azure public peering is deprecated for new circuits. For more information, see [ExpressRoute peering](expressroute-circuit-peerings.md).
172169
>
173170
171+
### To create Azure public peering
172+
173+
1. Configure ExpressRoute circuit. Ensure that the circuit is fully provisioned by the connectivity provider before continuing further. If your connectivity provider offers managed Layer 3 services, you can ask your connectivity provider to enable Azure public peering for you. In that case, you won't need to follow instructions listed in the next sections. However, if your connectivity provider does not manage routing for you, after creating your circuit, continue your configuration using the next steps.
174+
175+
![list public peering](./media/expressroute-howto-routing-portal-resource-manager/listprovisioned.png)
176+
2. Configure Azure public peering for the circuit. Make sure that you have the following items before you proceed with the next steps:
177+
178+
* A /30 subnet for the primary link. This must be a valid public IPv4 prefix. From this subnet you will assign the first useable IP address to your router as Microsoft uses the second useable IP for its router.
179+
* A /30 subnet for the secondary link. This must be a valid public IPv4 prefix. From this subnet you will assign the first useable IP address to your router as Microsoft uses the second useable IP for its router.
180+
* A valid VLAN ID to establish this peering on. Ensure that no other peering in the circuit uses the same VLAN ID. For both Primary and Secondary links you must use the same VLAN ID.
181+
* AS number for peering. You can use both 2-byte and 4-byte AS numbers.
182+
* **Optional -** An MD5 hash if you choose to use one.
183+
3. Select the Azure public peering row, as shown in the following image:
184+
185+
![select public peering row](./media/expressroute-howto-routing-portal-resource-manager/rpublic1.png)
186+
4. Configure public peering. The following image shows a configuration example:
187+
188+
![Configure public peering](./media/expressroute-howto-routing-portal-resource-manager/rpublic2.png)
189+
5. Save the configuration once you have specified all parameters. After the configuration has been accepted successfully, you see something similar to the following example:
190+
191+
![Save public peering configuration](./media/expressroute-howto-routing-portal-resource-manager/rpublic3.png)
192+
174193
### <a name="getpublic"></a>To view Azure public peering details
175194

176-
View the properties of Azure public peering by selecting the peering.
195+
You can view the properties of Azure public peering by selecting the peering.
196+
197+
![view public peering properties](./media/expressroute-howto-routing-portal-resource-manager/rpublic3.png)
177198

178199
### <a name="updatepublic"></a>To update Azure public peering configuration
179200

180-
Select the row for peering, then modify the peering properties.
201+
You can select the row for peering and modify the peering properties.
202+
203+
![select public peering row](./media/expressroute-howto-routing-portal-resource-manager/rpublic2.png)
181204

182205
### <a name="deletepublic"></a>To delete Azure public peering
183206

184-
Remove your peering configuration by selecting the delete icon.
207+
You can remove your peering configuration by selecting the delete icon, as shown in the following example:
208+
209+
![delete public peering](./media/expressroute-howto-routing-portal-resource-manager/rpublic4.png)
185210

186211
## Next steps
187212

articles/expressroute/howto-routing-cli.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -119,6 +119,12 @@ You can get configuration details by using the following example:
119119
```azurecli-interactive
120120
az network express-route peering show -g ExpressRouteResourceGroup --circuit-name MyCircuit --name AzureMicrosoftPeering
121121
```
122+
> [!IMPORTANT]
123+
> Microsoft verifies if the specified 'Advertised public prefixes' and 'Peer ASN' (or 'Customer ASN') are assigned to you in the Internet Routing Registry. If you are getting the public prefixes from another entity and if the assignment is not recorded with the routing registry, the automatic validation will not complete and will require manual validation. If the automatic validation fails, you will see 'AdvertisedPublicPrefixesState' as 'Validation needed' on the output of the above command.
124+
>
125+
> If you see the message 'Validation needed', collect the document(s) that show the public prefixes are assigned to your organization by the entity that is listed as the owner of the prefixes in the routing registry and submit these documents for manual validation by opening a support ticket as shown below.
126+
>
127+
>
122128
123129
The output is similar to the following example:
124130

0 commit comments

Comments
 (0)