Forum Discussion

hamma91's avatar
hamma91
Brass Contributor
Apr 20, 2022
Solved

about routes

  Hello Community,    I have this architecture HUB and Spoke with Forced Tunneling applicated.  I need your propositon for the routes tables and the routes for every part.    Thanks  
  • ibnmbodji's avatar
    ibnmbodji
    Apr 26, 2022

     

     

    Hi Ensure that you have the proper peering enabled
    hub-to-spoke A with gateway transit     

     spoke A-tohub  : Default + Use this virtual network's gateway or Route Server


    hub-to-spoke B with gateway transit     

    spoke B-tohub  : Default  Use this virtual network's gateway or Route Server

     

    If you want the incoming traffic (from the gateway ) to be filtered by the firewall attach a route table to the gateway subnet with the routes  

    Adress Prefix 10.1.0.0/16
    Next Hop Type : Virtual Appliance
    Next Hop IP address : Firewall private IP

     

    Adress Prefix 10.2.0.0/16
    Next Hop Type : Virtual Appliance
    Next Hop IP address : Firewall private IP

     

     

    Ensure also   that proper routes are present in  spoke route tables

     

    Route Table associated to Subnet Spoke A

     

    Adress Prefix 10.0.0.0/16
    Next Hop Type : Virtual Appliance
    Next Hop IP address : Firewall private IP


    Adress Prefix 10.1.0.0/16
    Next Hop Type : Virtual Appliance
    Next Hop IP address : Firewall private IP

     

    Adress Prefix  192.168.0.0/24
    Next Hop Type : Virtual Appliance
    Next Hop IP address : Firewall private IP

     

    Adress Prefix 0.0.0.0/0
    Next Hop Type : Virtual Network Gateway  (forced tunelling) 

     

    Route Table associated to Subnet Spoke B

    Adress Prefix 0.0.0.0/0
    Next Hop Type : Virtual Network Gateway   (forced tunneling)

     

    Adress Prefix 10.2.0.0/16
    Next Hop Type : Virtual Appliance
    Next Hop IP address : Firewall privat

     

    Adress Prefix  192.168.0.0/24
    Next Hop Type : Virtual Appliance
    Next Hop IP address : Firewall private IP

     

    Read the full doc for forced tunneling if needed   : https://docs.microsoft.com/fr-fr/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm

     

ibnmbodji's avatar
ibnmbodji
Iron Contributor
Apr 26, 2022

 

 

Hi Ensure that you have the proper peering enabled
hub-to-spoke A with gateway transit     

 spoke A-tohub  : Default + Use this virtual network's gateway or Route Server


hub-to-spoke B with gateway transit     

spoke B-tohub  : Default  Use this virtual network's gateway or Route Server

 

If you want the incoming traffic (from the gateway ) to be filtered by the firewall attach a route table to the gateway subnet with the routes  

Adress Prefix 10.1.0.0/16
Next Hop Type : Virtual Appliance
Next Hop IP address : Firewall private IP

 

Adress Prefix 10.2.0.0/16
Next Hop Type : Virtual Appliance
Next Hop IP address : Firewall private IP

 

 

Ensure also   that proper routes are present in  spoke route tables

 

Route Table associated to Subnet Spoke A

 

Adress Prefix 10.0.0.0/16
Next Hop Type : Virtual Appliance
Next Hop IP address : Firewall private IP


Adress Prefix 10.1.0.0/16
Next Hop Type : Virtual Appliance
Next Hop IP address : Firewall private IP

 

Adress Prefix  192.168.0.0/24
Next Hop Type : Virtual Appliance
Next Hop IP address : Firewall private IP

 

Adress Prefix 0.0.0.0/0
Next Hop Type : Virtual Network Gateway  (forced tunelling) 

 

Route Table associated to Subnet Spoke B

Adress Prefix 0.0.0.0/0
Next Hop Type : Virtual Network Gateway   (forced tunneling)

 

Adress Prefix 10.2.0.0/16
Next Hop Type : Virtual Appliance
Next Hop IP address : Firewall privat

 

Adress Prefix  192.168.0.0/24
Next Hop Type : Virtual Appliance
Next Hop IP address : Firewall private IP

 

Read the full doc for forced tunneling if needed   : https://docs.microsoft.com/fr-fr/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm

 

Resources