Using Route Server to firewall onprem traffic with an NVA

In a previous blog we had a setup with a Network Virtual Appliance (NVA) for Internet egress and hybrid connectivity based on Azure Virtual Network Gateways. There is another fairly typical use case with regards to traffic between on-premises an Azure: firewalling it with an NVA: In some situations customers will combine the role of … Continue reading Using Route Server to firewall onprem traffic with an NVA

Azure as Internet breakout from on-premises with Route Server

This is not a topology I would define as “best practice”, or one that I see in every Azure deployment out there, but I would certainly not describe it as exotic either. In this design, organizations want to leverage Azure as Internet breakout for their on-premises systems. Potentially because they do not have a good … Continue reading Azure as Internet breakout from on-premises with Route Server

BGP Azure Lab Maker

NOTE: the good old Cisco Cloud Services Router (CSR) has been deprecated, and its replacement is the Catalyst 8000v. However, I have not been able to make the Cat8Kv work in Azure: the reload command (required to activate its license) apparently always takes a manual confirmation, and some of the IPsec policies I used to … Continue reading BGP Azure Lab Maker

Connect two Virtual WANs to each other over VPN

You might know what Azure Virtual WAN is: in essence it is a network connectivity model in Azure where you can attach your Virtual Networks, your VPN branches, your ExpressRoute sites and your remote users connecting over VPN to it, and everybody can talk to each other. The main component of Azure Virtual WAN is … Continue reading Connect two Virtual WANs to each other over VPN