Skip to content

Commit 097a258

Browse files
Merge pull request #311596 from siddomala/udrRouteServer
Adding UDR to Gateway Subnet
2 parents e9686b8 + 4cd625d commit 097a258

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

articles/route-server/troubleshoot-route-server.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ For more information, see [User-defined routes](../virtual-network/virtual-netwo
2828
|-------|----------|
2929
| 0.0.0.0/0 | Internet |
3030

31-
### Why does the NVA lose its connectivity to the Route Server after forcing all traffic to a firewall using a user-defined route (UDR) on the GatewaySubnet?
31+
### Why do I experience on-premises connectivity issues after adding a user-defined route (UDR) on the GatewaySubnet?
3232

3333
If you want to inspect your on-premises traffic using a firewall, you can force all on-premises traffic to the firewall using a user-defined route (UDR) on the GatewaySubnet. However, this UDR might break the communication between the Route Server and the gateway by forcing their control plane traffic (BGP) to the firewall. This issue occurs if you're inspecting the traffic destined to the virtual network that has the Route Server.
3434

@@ -46,6 +46,8 @@ In this example:
4646
- 10.0.1.0/27 is the address space of RouteServerSubnet
4747
- 10.0.2.1 is the IP address of the firewall
4848

49+
The above scenario also applies when adding a UDR to your NVA's subnet. If you have an SDWAN NVA that is BGP peered with Route Server, and you add a UDR to the NVA's subnet with next hop as a firewall, then this UDR can impact the BGP peering between the SDWAN NVA and Route Server. To prevent this from happening, add a UDR for the RouteServerSubnet's address range with next hop as "VirtualNetwork".
50+
4951
### I added a user-defined route (UDR) with next hop type as Virtual Network Gateway, but this UDR isn't taking effect. Is this expected?
5052

5153
Yes, this is expected behavior. User-defined routes with next hop type **Virtual Network Gateway** aren't supported for subnets within Route Server's virtual network and peered virtual networks. However, if you want to configure your next hop to be a network virtual appliance (NVA) or the internet, you can add a user-defined route with next hop type **VirtualAppliance** or **Internet**.

0 commit comments

Comments
 (0)