Tutorial: Configure a virtual network gateway for ExpressRoute using the Azure portal

This tutorial walks you through the steps to add and remove a virtual network gateway for a pre-existing virtual network (virtual network). The steps for this configuration apply to VNets that were created using the Resource Manager deployment model for an ExpressRoute configuration. For more information about virtual network gateways and gateway configuration settings for ExpressRoute, see About virtual network gateways for ExpressRoute.

In this tutorial, you learn how to:

Prerequisites

The steps for this tutorial use the values in the following configuration reference list. You can copy the list to use as a reference, replacing the values with your own.

Configuration reference list

• Virtual Network Name = "TestVNet"

• Virtual Network address space = 192.168.0.0/16

• Subnet Name = "FrontEnd"

  • Subnet address space = "192.168.1.0/24"

• Resource Group = "TestRG"

• Location = "China East"

• Gateway Subnet name: "GatewaySubnet" You must always name a gateway subnet GatewaySubnet.

  • Gateway Subnet address space = "192.168.200.0/26"

• Gateway Name = "ERGW"

• Gateway Public IP Name = "MyERGWVIP"

• Gateway type = "ExpressRoute" This type is required for an ExpressRoute configuration.

  Important

  ExpressRoute Virtual Network Gateways no longer support the Basic Public IP SKU. Please associate a Standard IP to create the Virtual Network Gateway.

Create the gateway subnet

1. In the portal, navigate to the Resource Manager virtual network for which you want to create a virtual network gateway.

2. In the Settings section of your virtual network, select Subnets to expand the Subnet settings.

3. Select + Gateway subnet to add a gateway subnet.

   

4. The Name for your subnet is automatically filled in with the value 'GatewaySubnet'. This value is required in order for Azure to recognize the subnet as the gateway subnet. Adjust the autofilled Address range values to match your configuration requirements. We recommend creating a gateway subnet with a /27 or larger (/26, /25, and so on.). If you plan on connecting 16 ExpressRoute circuits to your gateway, you must create a gateway subnet of /26 or larger.

   If you're using a dual stack virtual network and plan to use IPv6-based private peering over ExpressRoute, select Add IP6 address space and enter IPv6 address range values.

   Then, select OK to save the values and create the gateway subnet.

   

Create the virtual network gateway

1. In the portal, on the left side, select Create a resource, and type 'Virtual Network Gateway' in search. Locate Virtual network gateway in the search return and select the entry. On the Virtual network gateway page, select Create.

2. On the Create virtual network gateway page, enter or select these settings:

   Setting	Value
   Subscription	Verify that the correct subscription is selected.
   Resource Group	The resource group gets automatically chosen once you select the virtual network.
   Name	Name your gateway. This name isn't the same as naming a gateway subnet. It's the name of the gateway resource you're creating.
   Region	Change the Region field to point to the location where your virtual network is located. If the region isn't pointing to the location where your virtual network is, the virtual network doesn't appear in the Virtual network dropdown.
   Gateway type	Select ExpressRoute
   SKU	Select the gateway SKU from the dropdown.
   Virtual network	Select TestVNet.
   Public IP address	Select Create new.
   Public IP address name	Provide a name for the public IP address.

   Important

   If you plan to use IPv6-based private peering over ExpressRoute, please make sure to create your gateway with a Public IP address of type Standard, Static using the PowerShell instructions.

3. Select Review + Create, and then Create to begin creating the gateway. The settings are validated and the gateway deploys. Creating virtual network gateway can take up to 45 minutes to complete.

Clean up resources

If you no longer need the ExpressRoute gateway, locate the gateway in the virtual network resource group and select Delete. Ensure the gateway doesn't have any connections to a circuit.

Next steps

In this tutorial, you learned how to create a virtual network gateway. For more information about virtual network gateways, see: ExpressRoute virtual network gateways.

To learn how to link your virtual network to an ExpressRoute circuit, advance to the next tutorial.