Connect a virtual network to ExpressRoute circuits using the Azure portal

1. Sign in to the Azure portal with this Preview link. This link is required to access the new preview connection create experience to an ExpressRoute circuit.

4. Select the Connection type as ExpressRoute and then select Next: Settings >.

   

5. Select the resiliency type for your connection. You can choose Maximum resiliency or Standard resiliency.

   Maximum resiliency (Recommended) - This option provides the highest level of resiliency to your virtual network. It provides two redundant connections from the virtual network gateway to two different ExpressRoute circuits in different ExpressRoute locations.

   Note

   Maximum Resiliency provides maximum protection against location wide outages and connectivity failures in an ExpressRoute location. This option is strongly recommended for all critical and production workloads.

   

   Standard resiliency - This option provides a single redundant connection from the virtual network gateway to a single ExpressRoute circuit.

   Note

   Standard Resiliency does not provide protection against location wide outages. This option is suitable for non-critical and non-production workloads.

   

6. Enter the following information for the respective resiliency type and then select Review + create. Then select Create after validation completes.

   

   Maximum resiliency

   Setting	Value
   Virtual network gateway	Select the virtual network gateway that you want to connect to the ExpressRoute circuit.
   Use existing connection or create new	You can augment resiliency for an ExpressRoute connection you already created by selecting Use existing. Then select an existing ExpressRoute connection for the first connection. If you select Use existing, you only need to configure the second connection. If you select Create new, enter following information for both connections.
   Name	Enter a name for the connection.
   ExpressRoute circuit	Select the ExpressRoute circuit that you want to connect to.
   Routing weight	Enter a routing weight for the connection. The routing weight is used to determine the primary and secondary connections. The connection with the higher routing weight is the preferred circuit.
   FastPath	Select the checkbox to enable FastPath. For more information, see About ExpressRoute FastPath.

   Complete the same information for the second ExpressRoute connection. When selecting an ExpressRoute circuit for the second connection, you are provided with the distance from the first ExpressRoute circuit. This information appears in the diagram and can help you select the second ExpressRoute location.

   Note

   To have maximum resiliency, you should select two circuits in different peering location. You'll be given the following warning if you select two circuits in the same peering location.

   

   Standard resiliency

   For standard resiliency, you only need to enter information for one connection.

7. After your connection has been successfully configured, your connection object will show the information for the connection.

   

4. Enter a name for the connection and then select Next: Settings >.

   

5. Select the gateway that belongs to the virtual network that you want to link to the circuit and select Review + create. Then select Create after validation completes.

   

6. After your connection has been successfully configured, your connection object will show the information for the connection.

   

Connect a virtual network to a circuit - different subscription

You can share an ExpressRoute circuit across multiple subscriptions. The following figure shows a simple schematic of how sharing works for ExpressRoute circuits across multiple subscriptions.

Each of the smaller clouds within the large cloud is used to represent subscriptions that belong to different departments within an organization. Each of the departments within the organization uses their own subscription for deploying their services--but they can share a single ExpressRoute circuit to connect back to your on-premises network. A single department (in this example: IT) can own the ExpressRoute circuit. Other subscriptions within the organization may use the ExpressRoute circuit.

Administration - About circuit owners and circuit users

The 'circuit owner' is an authorized Power User of the ExpressRoute circuit resource. The circuit owner can create authorizations that can be redeemed by 'circuit users'. Circuit users are owners of virtual network gateways that aren't within the same subscription as the ExpressRoute circuit. Circuit users can redeem authorizations (one authorization per virtual network).

The circuit owner has the power to modify and revoke authorizations at any time. Revoking an authorization results in all link connections being deleted from the subscription whose access was revoked.

Circuit owner operations

To create a connection authorization

The circuit owner creates an authorization, which creates an authorization key to be used by a circuit user to connect their virtual network gateways to the ExpressRoute circuit. An authorization is valid for only one connection.

1. In the ExpressRoute page, select Authorizations and then type a name for the authorization and select Save.

   

2. Once the configuration is saved, copy the Resource ID and the Authorization Key.

   

To delete a connection authorization

You can delete a connection by selecting the Delete icon for the authorization key for your connection.

If you want to delete the connection but retain the authorization key, you can delete the connection from the connection page of the circuit.

Circuit user operations

The circuit user needs the resource ID and an authorization key from the circuit owner.

To redeem a connection authorization

1. Select the + Create a resource button. Search for Connection and select Create.

   

2. Make sure the Connection type is set to ExpressRoute. Select the Resource group and Location, then select OK in the Basics page.

   Note

   The location must match the virtual network gateway location you're creating the connection for.

   

3. In the Settings page, Select the Virtual network gateway and check the Redeem authorization check box. Enter the Authorization key and the Peer circuit URI and give the connection a name. Select OK.

   Note

   The Peer Circuit URI is the Resource ID of the ExpressRoute circuit (which you can find under the Properties Setting pane of the ExpressRoute Circuit).

   

4. Review the information in the Summary page and select OK.

   

Configure ExpressRoute FastPath

You can enable ExpressRoute FastPath if your virtual network gateway is Ultra Performance or ErGw3AZ. FastPath improves data path performance such as packets per second and connections per second between your on-premises network and your virtual network.