topic Re: quantum gateway cluster to azure express route in Firewall and Security Management

quantum gateway cluster to azure express route

jurgenvrieze — Wed, 29 Nov 2023 19:05:36 GMT

One of our customers wants to create a Azure Express route connection. This customer has 2 datacenters strechted. On the first location the primairy Azure express route connection is delivered, on the other location the secondairy Azure express route path. The customer has a Quantum gateway cluster in a active-standby mode. Microsoft gives a /29 subnet for bgp routing, which is split into 2 /30 subnets .

I'm unable to find some good documentation on this. Obviously I should have 3 ip's for the cluster interface, but that's not possible. Using azure express route VPN, there must be something created like a VIP. I think that's also the case for this, but I'm not sure. Especially because I found that the RID should be the same as the VIP. I don't know how to configure this because I get 2 VIP's.

anyone that can point me in the right direction? Or should I go to dedicated routers for this (as we normally do).

Re: quantum gateway cluster to azure express route

the_rock — Thu, 30 Nov 2023 03:43:39 GMT

We have customer who has dedicated xpress route link. All we had to do back when we set it up is follow BGP documentation.

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_Gaia_Advanced_Routing_AdminGuide/Topics-GARG/BGP-Configuring-in-Gaia-Portal.htm?tocpath=BGP%7CConfiguring%20BGP%20in%20Gaia%20Portal%7C_____0

Andy

Re: quantum gateway cluster to azure express route

emmap — Thu, 30 Nov 2023 07:15:50 GMT

You might be able to follow this documentation to set the VIP on the /30 given and then use a different subnet for the interface IPs.

Re: quantum gateway cluster to azure express route

Darren_Fine — Tue, 27 May 2025 11:59:36 GMT

Hi Jurgenvrieze,

I have the same query as yourself - at other sites I was force to create the same vlan on a different interface just so that I could get both express route links up as I cannot add the same vlan twice to a bond interface 🙂

So for example lets say express route comes in on vlan 191 - I had a bond1.191 with the VIP in the /30 and then I had a duplicate cable going to the external switch and made a eth6.191 with the VIP of the second /30 express route.

This did work but it really feels like a bit of a hack - surely there is a way to have the two /30 's exist on the bond somehow ? To make the solution better 🙂 ?

(I did start thinking about a local loopback but wasnt sure if that would work)

Anyhow - thought I would share and see if your problem was solved ?

Thanks

Re: quantum gateway cluster to azure express route

Chris_Atkinson — Tue, 27 May 2025 12:22:34 GMT

Did you explore any options on the switch side to map/translate VLAN IDs?

Re: quantum gateway cluster to azure express route

Darren_Fine — Mon, 02 Jun 2025 12:39:34 GMT

Hi Chris,

That is a good hint - I have researched that and I think I have a plan - will be able to test in the next two weeks and will revert.

Thanks