Create ExpressRoute Direct using the Azure portal

  • Article

This article shows you how to create ExpressRoute Direct using the Azure portal. ExpressRoute Direct lets you connect directly into Azure global network at peering locations strategically distributed across the world. For more information, see About ExpressRoute Direct.

Before you begin

Before using ExpressRoute Direct, you must first enroll your subscription. To enroll, please do the following via Azure PowerShell:

  1. Sign in to Azure portal and select the subscription you wish to enroll.

    Connect-AzAccount -Environment AzureChinaCloud 
Select-AzSubscription -Subscription "<SubscriptionID or SubscriptionName>"

  2. Register your subscription for Public Preview using the following command:

    Register-AzProviderFeature -FeatureName AllowExpressRoutePorts -ProviderNamespace Microsoft.Network

Once enrolled, verify that the Microsoft.Network resource provider is registered to your subscription. Registering a resource provider configures your subscription to work with the resource provider.

  1. Access your subscription settings as described in Azure resource providers and types.
  2. In your subscription, for Resource Providers, verify that the Microsoft.Network provider shows a Registered status. If the Microsoft.Network resource provider is not present in the list of registered providers, add it.

Create ExpressRoute Direct

  1. In the Azure portal, select + Create a resource.

  2. On the Create a resource page, enter ExpressRoute Direct into the Search services and marketplace box.

  3. From the results, select ExpressRoute Direct.

  4. On the ExpressRoute Direct page, select Create to open the Create ExpressRoute Direct page.

  5. Start by completing the fields on the Basics page.

    Screenshot of the basics page for create ExpressRoute Direct.

    • Subscription: The Azure subscription you want to use to create a new ExpressRoute Direct. The ExpressRoute Direct resource and ExpressRoute circuits created in a later step must be in the same subscription.
    • Resource group: The Azure resource group in which the new ExpressRoute Direct resource will be created. If you don't have an existing resource group, you can create a new one.
    • Region: The Azure public region that the resource will be created in.
    • ExpressRoute Direct name: The name of the new ExpressRoute Direct resource.

  6. Next, complete the fields on the Configuration page.

    Screenshot that shows the 'Create ExpressRoute Direct' page with the 'Configuration' tab selected.

    • Peering Location: The peering location where you'll connect to the ExpressRoute Direct resource. For more information about peering locations, review ExpressRoute Locations.
    • Bandwidth: The port pair bandwidth that you want to reserve. ExpressRoute Direct supports both 10 Gb and 100 Gb bandwidth options. If your desired bandwidth isn't available at the specified peering location, open a Support Request in the Azure portal.
    • Encapsulation: ExpressRoute Direct supports both QinQ and Dot1Q encapsulation.
      • If QinQ is selected, each ExpressRoute circuit will be dynamically assigned an S-Tag and will be unique throughout the ExpressRoute Direct resource.
        • Each C-Tag on the circuit must be unique on the circuit, but not across the ExpressRoute Direct.
      • If Dot1Q encapsulation is selected, you must manage uniqueness of the C-Tag (VLAN) across the entire ExpressRoute Direct resource.

    Important

    ExpressRoute Direct can only be one encapsulation type. Encapsulation can't be changed after ExpressRoute Direct creation.

  7. Specify any resource tags, then select Review + create to validate the ExpressRoute Direct resource settings.

  8. Select Create once validation passed. You'll see a message letting you know that your deployment is underway. A status will display on this page when your ExpressRoute Direct resource gets created.

Generate the Letter of Authorization (LOA)

  1. Go to the overview page of the ExpressRoute Direct resource and select Generate Letter of Authorization.

    Screenshot of generate letter of authorization button on overview page.

  2. Enter your company name and select Download to generate the letter.

    Screenshot of letter of authorization page.

This process should be used to conduct a Layer 1 test, ensuring that each cross-connection is properly patched into each router for primary and secondary.

  1. From the ExpressRoute Direct resource, select Links under Settings in the left side menu. Then toggle the Admin State to Enabled and select Save for Link 1.

    Screenshot of admin state enabled for Link 1.

  2. Select the Link 2 tab. Then toggle the Admin State to Enabled and select Save for Link 2.

    Screenshot of admin state enabled for Link 2.

    Important

    Billing will begin when admin state is enabled on either link.

Create a circuit

By default, you can create 10 circuits in the subscription where the ExpressRoute Direct resource is. This number can be increased by support. You're responsible for tracking both Provisioned and Utilized Bandwidth. Provisioned bandwidth is the sum of bandwidth of all circuits on the ExpressRoute Direct resource. Utilized bandwidth is the physical usage of the underlying physical interfaces.

  • There are more circuit bandwidths that can be utilized on ExpressRoute Direct only to support the scenarios outlined. These bandwidths are: 40 Gbps and 100 Gbps.

  • SkuTier can be Standard, or Premium.

  • SkuFamily must be MeteredData only. Unlimited isn't supported on ExpressRoute Direct.

The following steps help you create an ExpressRoute circuit from the ExpressRoute Direct workflow. If you would rather, you can also create a circuit using the regular circuit workflow, although there's no advantage in using the regular circuit workflow steps for this configuration. For more information, see Create and modify an ExpressRoute circuit.

  1. From the ExpressRoute Direct resource, select Circuits from under Settings in the left side menu, and then select + Add.

    Screenshot of add a circuit button to an ExpressRoute Direct resource.

  2. Start by completing the fields on the Basics page.

    Screenshot of the basics page of the create ExpressRoute circuit.

    • Subscription: The Azure subscription you want to use to create a new ExpressRoute circuit. The ExpressRoute circuit has to be in the same subscription as the ExpressRoute Direct resource.
    • Resource group: The Azure resource group in which the new ExpressRoute circuit resource will be created. If you don't have an existing resource group, you can create a new one.
    • Region: The Azure public region that the resource will be created in. The region must be the same as the ExpressRoute Direct resource.
    • Name: The name of the new ExpressRoute circuit resource.

  3. Next, complete the fields on the Configuration page.

    Configuration page - ExpressRoute Direct

    • Port type: Select Direct as the port type to create a circuit with ExpressRoute Direct.
    • ExpressRoute Direct resource: Select the ExpressRoute Direct resource you created in the previous section.
    • Circuit bandwidth: Select the bandwidth for the circuit. Ensure to keep track of the bandwidth utilization for the ExpressRoute Direct port.
    • SKU: Select the SKU type for the ExpressRoute circuit that best suits your environment.
    • Billing model: Only Metered billing model circuits are supported with ExpressRoute Direct at creation.

    Note

    You can change from Metered to Unlimited after the creation of the circuit. This change is irreversible once completed. To change the billing model, go to the configuration page of the ExpressRoute Direct circuit.

  4. Specify any resource tags, then select Review + Create to validate the settings before creating the resource.

  5. Select Create once validation passed. You'll see a message letting you know that your deployment is underway. A status will display on this page when your ExpressRoute circuit resource gets created.

Enable ExpressRoute Direct and circuits in a different subscription

  1. Go to the ExpressRoute Direct resource and select Authorizations under Settings in the left side menu. Then enter a name for a new authorization and select Save.

    Screenshot of authorizations page.

  2. Create a new ExpressRoute circuit in a different subscription or Microsoft Entra tenant.

  3. Select Direct as the port type and check the box for Redeem authorization. Enter the resource URI of the ExpressRoute Direct resource and enter the authorization key generated in step 2.

    Screenshot of redeeming authorization when creating a new ExpressRoute circuit.

  4. Select Review + Create to validate the settings before creating the resource. Then select Create to deploy the new ExpressRoute circuit.

Next steps

After you've created the ExpressRoute circuit, you can link virtual networks to your ExpressRoute circuit.