创建 Azure ExpressRoute Direct

ExpressRoute Direct 使你能够通过战略性分布在全球的对等互连位置直接连接到Azure的全球网络。有关详细信息，请参阅关于 ExpressRoute Direct Connect。

本文介绍如何使用 Azure 门户、PowerShell 和Azure CLI创建 ExpressRoute Direct。

在您开始之前

PowerShell
Azure CLI

需要先注册订阅，然后才能使用 ExpressRoute Direct。若要注册，请使用Azure PowerShell运行以下命令：

登录到Azure，然后选择要注册的订阅。

Connect-AzAccount -Environment AzureChinaCloud 
Select-AzSubscription -Subscription "<SubscriptionID or SubscriptionName>"

使用以下命令注册订阅：

Register-AzProviderFeature -FeatureName AllowExpressRoutePorts -ProviderNamespace Microsoft.Network

注册后，验证 Microsoft.Network 资源提供程序是否已在你的订阅中注册。通过注册资源提供程序，将您的订阅配置为与资源提供程序共同使用。

需要先注册订阅，然后才能使用 ExpressRoute Direct。需要先注册订阅，然后才能使用 ExpressRoute Direct。若要注册，请通过Azure PowerShell执行以下作：

登录到Azure，然后选择要注册的订阅。

Connect-AzAccount -Environment AzureChinaCloud 

Select-AzSubscription -Subscription "<SubscriptionID or SubscriptionName>"

使用以下命令注册公共预览版订阅：

Register-AzProviderFeature -FeatureName AllowExpressRoutePorts -ProviderNamespace Microsoft.Network

注册后，验证 Microsoft.Network 资源提供程序是否已在你的订阅中注册。通过注册资源提供程序，将您的订阅配置为与资源提供程序共同使用。

登录到Azure并选择订阅。 ExpressRoute Direct 资源和 ExpressRoute 线路必须位于同一订阅中。

Connect-AzAccount -Environment AzureChinaCloud 

Select-AzSubscription -Subscription "<SubscriptionID or SubscriptionName>"

将您的订阅重新注册到 Microsoft.Network，以便访问 expressrouteportslocation 和 expressrouteport APIs。
```
Register-AzResourceProvider -ProviderNameSpace "Microsoft.Network"
```

列出支持 ExpressRoute Direct 的所有位置。

Get-AzExpressRoutePortsLocation | format-list

示例输出

Name                : Equinix-Ashburn-DC2
Id                  : /subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-Ashburn-D
                     C2
ProvisioningState   : Succeeded
Address             : 21715 Filigree Court, DC2, Building F, Ashburn, VA 20147
Contact             : support@equinix.com
AvailableBandwidths : []

Name                : Equinix-Dallas-DA3
Id                  : /subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-Dallas-DA
                     3
ProvisioningState   : Succeeded
Address             : 1950 N. Stemmons Freeway, Suite 1039A, DA3, Dallas, TX 75207
Contact             : support@equinix.com
AvailableBandwidths : []

Name                : Equinix-San-Jose-SV1
Id                  : /subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-San-Jose-
                     SV1
ProvisioningState   : Succeeded
Address             : 11 Great Oaks Blvd, SV1, San Jose, CA 95119
Contact             : support@equinix.com
AvailableBandwidths : []

确定上一步中列出的位置是否具有可用带宽。

Get-AzExpressRoutePortsLocation -LocationName "Equinix-San-Jose-SV1" | format-list

示例输出

Name                : Equinix-San-Jose-SV1
Id                  : /subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-San-Jose-
                     SV1
ProvisioningState   : Succeeded
Address             : 11 Great Oaks Blvd, SV1, San Jose, CA 95119
Contact             : support@equinix.com
AvailableBandwidths : [
                       {
                         "OfferName": "100 Gbps",
                         "ValueInGbps": 100
                       }
                     ]

注释

如果目标位置的带宽不可用，请在 Azure 门户中打开 support 请求并选择 ExpressRoute 直接支持主题。

根据上一步中的位置创建 ExpressRoute Direct 资源。

ExpressRoute Direct 支持 QinQ 和 Dot1Q 封装。如果选择了 QinQ，则会为每个 ExpressRoute 线路动态分配一个 S-Tag，并且每个线路在整个 ExpressRoute Direct 资源中是唯一的。线路上的每个 C-Tag 在该线路上必须是唯一的，但在整个 ExpressRoute Direct 中不必唯一。

如果选择 Dot1Q 封装，则必须在整个 ExpressRoute Direct 资源中管理 C 标记（VLAN）的唯一性。

重要

ExpressRoute Direct 只能采用一种封装类型。无法在创建 ExpressRoute Direct 后更改封装。

$ERDirect = New-AzExpressRoutePort -Name $Name -ResourceGroupName $ResourceGroupName -PeeringLocation $PeeringLocationName -BandwidthInGbps 100.0 -Encapsulation QinQ | Dot1Q -Location $AzureRegion

注释

封装属性也可以设置为 Dot1Q。

示例输出：

Name                       : Contoso-Direct
ResourceGroupName          : Contoso-Direct-rg
Location                   : chinaeast
Id                         : /subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/exp
                            ressRoutePorts/Contoso-Direct
Etag                       : W/"<etagnumber> "
ResourceGuid               : <number>
ProvisioningState          : Succeeded
PeeringLocation            : Equinix-Seattle-SE2
BandwidthInGbps            : 100
ProvisionedBandwidthInGbps : 0
Encapsulation              : QinQ
Mtu                        : 1500
EtherType                  : 0x8100
AllocationDate             : Saturday, September 1, 2018
Links                      : [
                              {
                                "Name": "link1",
                                "Etag": "W/\"<etagnumber>\"",
                                "Id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.
                            Network/expressRoutePorts/Contoso-Direct/links/link1",
                                "RouterName": "tst-09xgmr-cis-1",
                                "InterfaceName": "HundredGigE2/2/2",
                                "PatchPanelId": "PPID",
                                "RackId": "RackID",
                                "ConnectorType": "SC",
                                "AdminState": "Disabled",
                                "ProvisioningState": "Succeeded"
                              },
                              {
                                "Name": "link2",
                                "Etag": "W/\"<etagnumber>\"",
                                "Id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.
                            Network/expressRoutePorts/Contoso-Direct/links/link2",
                                "RouterName": "tst-09xgmr-cis-2",
                                "InterfaceName": "HundredGigE2/2/2",
                                "PatchPanelId": "PPID",
                                "RackId": "RackID",
                                "ConnectorType": "SC",
                                "AdminState": "Disabled",
                                "ProvisioningState": "Succeeded"
                              }
                            ]
Circuits                   : []

登录到Azure并选择包含 ExpressRoute 的订阅。 ExpressRoute Direct 资源和 ExpressRoute 线路必须位于同一订阅中。在Azure CLI中运行以下命令：
```
az cloud set -n AzureChinaCloud
az login
# az cloud set -n AzureCloud   //means return to Public Azure.
```
检查帐户的订阅：
```
az account list 
```
选择要为其创建 ExpressRoute 专线的订阅：
```
az account set --subscription "<subscription ID>"
```
请重新注册您的订阅到 Microsoft.Network，以访问 expressrouteportslocation 和 expressrouteport APIs
```
az provider register --namespace Microsoft.Network
```

列出支持 ExpressRoute Direct 的所有位置：

az network express-route port location list

示例输出

[
{
 "address": "Ashburn, VA",
 "availableBandwidths": [],
 "contact": "support@contoso.com",
 "id": "/subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-Ashburn-DC2",
 "location": null,
 "name": "Equinix-Ashburn-DC2",
 "provisioningState": "Succeeded",
 "tags": null,
 "type": "Microsoft.Network/expressRoutePortsLocations"
},
{
 "address": "Dallas, TX",
 "availableBandwidths": [],
 "contact": "support@contoso.com",
 "id": "/subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-Dallas-DA3",
 "location": null,
 "name": "Equinix-Dallas-DA3",
 "provisioningState": "Succeeded",
 "tags": null,
 "type": "Microsoft.Network/expressRoutePortsLocations"
},
{
 "address": "Beijing, NY",
 "availableBandwidths": [],
 "contact": "support@contoso.com",
 "id": "/subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-New-York-NY5",
 "location": null,
 "name": "Equinix-New-York-NY5",
 "provisioningState": "Succeeded",
 "tags": null,
 "type": "Microsoft.Network/expressRoutePortsLocations"
},
{
 "address": "San Jose, CA",
 "availableBandwidths": [],
 "contact": "support@contoso.com",
 "id": "/subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-San-Jose-SV1",
 "location": null,
 "name": "Equinix-San-Jose-SV1",
 "provisioningState": "Succeeded",
 "tags": null,
 "type": "Microsoft.Network/expressRoutePortsLocations"
},
{
 "address": "Seattle, WA",
 "availableBandwidths": [],
 "contact": "support@contoso.com",
 "id": "/subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-Seattle-SE2",
 "location": null,
 "name": "Equinix-Seattle-SE2",
 "provisioningState": "Succeeded",
 "tags": null,
 "type": "Microsoft.Network/expressRoutePortsLocations"
}
]

确定上一步中列出的某个位置是否具有可用带宽：

az network express-route port location show -l "Equinix-Ashburn-DC2"

示例输出

{
"address": "Ashburn, VA",
"availableBandwidths": [
 {
   "offerName": "100 Gbps",
   "valueInGbps": 100
 }
],
"contact": "support@contoso.com",
"id": "/subscriptions/<subscriptionID>/providers/Microsoft.Network/expressRoutePortsLocations/Equinix-Ashburn-DC2",
"location": null,
"name": "Equinix-Ashburn-DC2",
"provisioningState": "Succeeded",
"tags": null,
"type": "Microsoft.Network/expressRoutePortsLocations"
}

创建基于前面步骤中选择的位置的 ExpressRoute Direct 资源。

ExpressRoute Direct 支持 QinQ 和 Dot1Q 封装。如果选择 QinQ，则会动态为每个 ExpressRoute 线路分配一个 S-Tag，并且在整个 ExpressRoute Direct 资源中是唯一的。线路中的每个 C-Tag 都必须在该线路中是唯一的，但不需要在 ExpressRoute Direct 资源中唯一。

如果选择 Dot1Q 封装，则必须在整个 ExpressRoute Direct 资源中管理 C 标记（VLAN）的唯一性。

重要

ExpressRoute Direct 只能是一种封装类型。创建 ExpressRoute Direct 资源后，无法更改封装类型。

az network express-route port create -n $name -g $RGName --bandwidth 100 gbps  --encapsulation QinQ | Dot1Q --peering-location $PeeringLocationName -l $AzureRegion

注释

还可以将“封装”属性设置为“Dot1Q”。

示例输出

{
"allocationDate": "Wednesday, October 17, 2018",
"bandwidthInGbps": 100,
"circuits": null,
"encapsulation": "Dot1Q",
"etag": "W/\"<etagnumber>\"",
"etherType": "0x8100",
"id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRoutePorts/Contoso-Direct",
"links": [
 {
   "adminState": "Disabled",
   "connectorType": "LC",
   "etag": "W/\"<etagnumber>\"",
   "id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRoutePorts/Contoso-Direct/links/link1",
   "interfaceName": "HundredGigE2/2/2",
   "name": "link1",
   "patchPanelId": "PPID",
   "provisioningState": "Succeeded",
   "rackId": "RackID",
   "resourceGroup": "Contoso-Direct-rg",
   "routerName": "tst-09xgmr-cis-1",
   "type": "Microsoft.Network/expressRoutePorts/links"
 },
 {
   "adminState": "Disabled",
   "connectorType": "LC",
   "etag": "W/\"<etagnumber>\"",
   "id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRoutePorts/Contoso-Direct/links/link2",
   "interfaceName": "HundredGigE2/2/2",
   "name": "link2",
   "patchPanelId": "PPID",
   "provisioningState": "Succeeded",
   "rackId": "RackID",
   "resourceGroup": "Contoso-Direct-rg",
   "routerName": "tst-09xgmr-cis-2",
   "type": "Microsoft.Network/expressRoutePorts/links"
 }
],
"location": "chinanorth",
"mtu": "1500",
"name": "Contoso-Direct",
"peeringLocation": "Equinix-Ashburn-DC2",
"provisionedBandwidthInGbps": 0.0,
"provisioningState": "Succeeded",
"resourceGroup": "Contoso-Direct-rg",
"resourceGuid": "02ee21fe-4223-4942-a6bc-8d81daabc94f",
"tags": null,
"type": "Microsoft.Network/expressRoutePorts"
}

生成授权书 (LOA)

PowerShell
Azure CLI

引用最近创建的 ExpressRoute Direct 资源，输入要向其写入 LOA 的客户名称，并（可选）定义用于存储文档的文件位置。如果未引用文件路径，文档将下载到当前目录。

Azure PowerShell

 New-AzExpressRoutePortLOA -ExpressRoutePort $ERDirect -CustomerName TestCustomerName -Destination "C:\Users\SampleUser\Downloads"

示例输出

Written Letter of Authorization To: C:\Users\SampleUser\Downloads\LOA.pdf

输入最近创建的 ExpressRoute Direct 资源名称、资源组名称和客户名称，以便将 LOA 写入和（可选）定义用于存储文档的文件位置。如果未引用文件路径，文档将下载到当前目录。

az network express-route port generate-loa -n Contoso-Direct -g Contoso-Direct-rg --customer-name Contoso --destination C:\Users\SampleUser\Downloads\LOA.pdf

更改链路的管理状态

PowerShell
Azure CLI

应当使用此过程执行第 1 层测试，以确保每个交叉连接都已针对主端口和辅助端口正确设置到每台路由器中。

获取 ExpressRoute Direct 详细信息。

$ERDirect = Get-AzExpressRoutePort -Name $Name -ResourceGroupName $ResourceGroupName

将“链接”设置为“已启用”。重复此步骤，将每个链接设置为启用。

Links[0] 是主端口，Links[1] 是辅助端口。

$ERDirect.Links[0].AdminState = "Enabled"
Set-AzExpressRoutePort -ExpressRoutePort $ERDirect
$ERDirect = Get-AzExpressRoutePort -Name $Name -ResourceGroupName $ResourceGroupName
$ERDirect.Links[1].AdminState = "Enabled"
Set-AzExpressRoutePort -ExpressRoutePort $ERDirect

示例输出：

Name                       : Contoso-Direct
ResourceGroupName          : Contoso-Direct-rg
Location                   : chinaeast
Id                         : /subscriptions/<number>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/exp
                          ressRoutePorts/Contoso-Direct
Etag                       : W/"<etagnumber> "
ResourceGuid               : <number>
ProvisioningState          : Succeeded
PeeringLocation            : Equinix-Seattle-SE2
BandwidthInGbps            : 100
ProvisionedBandwidthInGbps : 0
Encapsulation              : QinQ
Mtu                        : 1500
EtherType                  : 0x8100
AllocationDate             : Saturday, September 1, 2018
Links                      : [
                            {
                              "Name": "link1",
                              "Etag": "W/\"<etagnumber>\"",
                              "Id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.
                          Network/expressRoutePorts/Contoso-Direct/links/link1",
                              "RouterName": "tst-09xgmr-cis-1",
                              "InterfaceName": "HundredGigE2/2/2",
                              "PatchPanelId": "PPID",
                              "RackId": "RackID",
                              "ConnectorType": "SC",
                              "AdminState": "Enabled",
                              "ProvisioningState": "Succeeded"
                            },
                            {
                              "Name": "link2",
                              "Etag": "W/\"<etagnumber>\"",
                              "Id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.
                          Network/expressRoutePorts/Contoso-Direct/links/link2",
                              "RouterName": "tst-09xgmr-cis-2",
                              "InterfaceName": "HundredGigE2/2/2",
                              "PatchPanelId": "PPID",
                              "RackId": "RackID",
                              "ConnectorType": "SC",
                              "AdminState": "Enabled",
                              "ProvisioningState": "Succeeded"
                            }
                          ]
Circuits                   : []

使用相同的过程和 AdminState = "Disabled" 设置可关闭端口。

使用此过程执行第 1 层测试。确保将每个交叉连接正确连接到每个路由器的主端口和辅助端口上。

将链接设置为“启用”。重复此步骤以将每个链接设置为“启用”。

Links[0] 是主端口，Links[1] 是辅助端口。

az network express-route port update -n Contoso-Direct -g Contoso-Direct-rg --set links[0].adminState="Enabled"

az network express-route port update -n Contoso-Direct -g Contoso-Direct-rg --set links[1].adminState="Enabled"

示例输出

{
"allocationDate": "Wednesday, October 17, 2018",
"bandwidthInGbps": 100,
"circuits": null,
"encapsulation": "Dot1Q",
"etag": "W/\"<etagnumber>\"",
"etherType": "0x8100",
"id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRoutePorts/Contoso-Direct",
"links": [
 {
   "adminState": "Enabled",
   "connectorType": "LC",
   "etag": "W/\"<etagnumber>\"",
   "id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRoutePorts/Contoso-Direct/links/link1",
   "interfaceName": "HundredGigE2/2/2",
   "name": "link1",
   "patchPanelId": "PPID",
   "provisioningState": "Succeeded",
   "rackId": "RackID",
   "resourceGroup": "Contoso-Direct-rg",
   "routerName": "tst-09xgmr-cis-1",
   "type": "Microsoft.Network/expressRoutePorts/links"
 },
 {
   "adminState": "Enabled",
   "connectorType": "LC",
   "etag": "W/\"<etagnumber>\"",
   "id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRoutePorts/Contoso-Direct/links/link2",
   "interfaceName": "HundredGigE2/2/2",
   "name": "link2",
   "patchPanelId": "PPID",
   "provisioningState": "Succeeded",
   "rackId": "RackID",
   "resourceGroup": "Contoso-Direct-rg",
   "routerName": "tst-09xgmr-cis-2",
   "type": "Microsoft.Network/expressRoutePorts/links"
 }
],
"location": "chinanorth",
"mtu": "1500",
"name": "Contoso-Direct",
"peeringLocation": "Equinix-Ashburn-DC2",
"provisionedBandwidthInGbps": 0.0,
"provisioningState": "Succeeded",
"resourceGroup": "Contoso-Direct-rg",
"resourceGuid": "<resourceGUID>",
"tags": null,
"type": "Microsoft.Network/expressRoutePorts"
}

使用相同的过程来关闭端口，方法是使用 AdminState = "Disabled"。

创建电路

PowerShell
Azure CLI

默认情况下，可以在 ExpressRoute Direct 资源所在的订阅中创建 10 条线路。可以通过支持请求增加此限制。你负责跟踪预配的和已利用的带宽。预配带宽是 ExpressRoute Direct 资源上所有线路的带宽之和，并且已利用的带宽是基础物理接口的物理使用情况。

ExpressRoute Direct 端口上可以使用更多线路带宽，仅支持前面概述的方案。这些带宽为 40 Gbps 和 100 Gbps。

SkuTier 可以是标准版，也可以是高级版。

SkuFamily 在创建时只能是 MeteredData。若要使用“无限制”数据，需要在创建后更新 SkuFamily。

注释

一旦更改为“无限制”数据，就无法将其更改回来，除非重新创建 ExpressRoute 线路。

在 ExpressRoute Direct 资源上创建线路。

New-AzExpressRouteCircuit -Name $Name -ResourceGroupName $ResourceGroupName -ExpressRoutePort $ERDirect -BandwidthinGbps 100.0  -Location $AzureRegion -SkuTier Premium -SkuFamily MeteredData

其他带宽包括：5.0、10.0 和 40.0

示例输出：

Name                             : ExpressRoute-Direct-ckt
ResourceGroupName                : Contoso-Direct-rg
Location                         : chinaeast
Id                               : /subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Netwo
                                 rk/expressRouteCircuits/ExpressRoute-Direct-ckt
Etag                             : W/"<etagnumber>"
ProvisioningState                : Succeeded
Sku                              : {
                                   "Name": "Premium_MeteredData",
                                   "Tier": "Premium",
                                   "Family": "MeteredData"
                                 }
CircuitProvisioningState         : Enabled
ServiceProviderProvisioningState : Provisioned
ServiceProviderNotes             : 
ServiceProviderProperties        : null
ExpressRoutePort                 : {
                                   "Id": "/subscriptions/<subscriptionID>n/resourceGroups/Contoso-Direct-rg/providers/Micros
                                 oft.Network/expressRoutePorts/Contoso-Direct"
                                 }
BandwidthInGbps                  : 10
Stag                             : 2
ServiceKey                       : aaaaaaaa-0b0b-1c1c-2d2d-333333333333
Peerings                         : []
Authorizations                   : []
AllowClassicOperations           : False
GatewayManagerEtag

默认情况下，可以在包含 ExpressRoute Direct 资源的订阅中创建 10 条线路。 Azure支持可以增加默认限制。你负责跟踪预配的和已利用的带宽。预配带宽是 ExpressRoute Direct 资源上所有线路的带宽之和。利用带宽是基础物理接口的物理用法。

只能在 ExpressRoute Direct 上使用其他线路带宽来支持此处概述的方案。带宽为 40 Gbps 和 100 Gbps。

SkuTier 可以是标准版，也可以是高级版。

SkuFamily 在创建时只能是 MeteredData。在创建线路后可以通过更新更改为“无限制”。sku-family

注释

更改为“无限制”数据后，如果不重新创建 ExpressRoute 线路，就无法更改回原来的状态。

在 ExpressRoute Direct 资源上创建线路：

az network express-route create --express-route-port "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRoutePorts/Contoso-Direct" -n "Contoso-Direct-ckt" -g "Contoso-Direct-rg" --sku-family MeteredData --sku-tier Standard --bandwidth 100 Gbps --location $AzureRegion

其他带宽包括 5 Gbps、10 Gbps 和 40 Gbps。

示例输出

{
"allowClassicOperations": false,
"allowGlobalReach": false,
"authorizations": [],
"bandwidthInGbps": 100.0,
"circuitProvisioningState": "Enabled",
"etag": "W/\"<etagnumber>\"",
"expressRoutePort": {
  "id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRoutePorts/Contoso-Direct",
  "resourceGroup": "Contoso-Direct-rg"
},
"gatewayManagerEtag": "",
"id": "/subscriptions/<subscriptionID>/resourceGroups/Contoso-Direct-rg/providers/Microsoft.Network/expressRouteCircuits/ERDirect-ckt-cli",
"location": "chinanorth",
"name": "ERDirect-ckt-cli",
"peerings": [],
"provisioningState": "Succeeded",
"resourceGroup": "Contoso-Direct-rg",
"serviceKey": "<serviceKey>",
"serviceProviderNotes": null,
"serviceProviderProperties": null,
"serviceProviderProvisioningState": "Provisioned",
"sku": {
  "family": "MeteredData",
  "name": "Standard_MeteredData",
  "tier": "Standard"
},
"stag": null,
"tags": null,
"type": "Microsoft.Network/expressRouteCircuits"
}

在另一个订阅中启用 ExpressRoute Direct 和线路

PowerShell
Azure CLI

可以为 ExpressRoute Direct 资源创建授权，并兑换授权，以在不同的订阅或Microsoft Entra租户中创建 ExpressRoute 线路。

登录到Azure并选择 ExpressRoute Direct 订阅。

Connect-AzAccount -Environment AzureChinaCloud 

Select-AzSubscription -Subscription "<SubscriptionID or SubscriptionName>"

获取 ExpressRoute Direct 详细信息：

Get-AzExpressRoutePort 

$ERPort = Get-AzExpressRoutePort -Name $Name -ResourceGroupName $ResourceGroupName

通过在 PowerShell 中运行以下命令创建 ExpressRoute Direct 授权：

Add-AzExpressRoutePortAuthorization -Name $AuthName -ExpressRoutePort $ERPort

示例输出：

    Name                   : ERDirectAuthorization_1
    Id                     : /subscriptions/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e/resourceGroups/erdirect-rg/providers/Microsoft.Network/expressRoutePorts/erdirect/authorizations/ERDirectAuthorization_1
    Etag                   : W/"24cac874-dfb4-4931-9447-28e67edd5155"
    AuthorizationKey       : 6e1fc16a-0777-4cdc-a206-108f2f0f67e8
    AuthorizationUseStatus : Available
    ProvisioningState      : Succeeded
    CircuitResourceUri     :

验证是否已成功创建授权，并将 ExpressRoute Direct 授权存储到变量中：

$ERDirectAuthorization = Get-AzExpressRoutePortAuthorization -ExpressRoutePortObject $ERPort -Name $AuthName
$ERDirectAuthorization

示例输出：

  Name                   : ERDirectAuthorization_1
  Id                     : /subscriptions/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e/resourceGroups/erdirect-rg/providers/Microsoft.Network/expressRoutePorts/erdirect/authorizations/ERDirectAuthorization_1
  Etag                   : W/"24cac874-dfb4-4931-9447-28e67edd5155"
  AuthorizationKey       : aaaaaaaa-0b0b-1c1c-2d2d-333333333333
  AuthorizationUseStatus : Available
  ProvisioningState      : Succeeded
  CircuitResourceUri     :on

使用以下命令兑换授权以在不同的订阅或Microsoft Entra租户中创建 ExpressRoute Direct 线路：

Select-AzSubscription -Subscription "<SubscriptionID or SubscriptionName>"

New-AzExpressRouteCircuit -Name $Name -ResourceGroupName $RGName -Location $Location -SkuTier $SkuTier -SkuFamily $SkuFamily -BandwidthInGbps $BandwidthInGbps -ExpressRoutePort $ERPort -AuthorizationKey $ERDirectAuthorization.AuthorizationKey

可以为 ExpressRoute Direct 资源创建授权，并兑换授权，以在不同的订阅或Microsoft Entra租户中创建 ExpressRoute 线路。

登录到Azure并选择订阅：

az cloud set -n AzureChinaCloud
az login
# az cloud set -n AzureCloud   //means return to Public Azure.

az account set --subscription "<SubscriptionID or SubscriptionName>"

获取 ExpressRoute Direct 详细信息：

az network express-route port list
az network express-route port show --name <Name> --resource-group <ResourceGroupName>

为 ExpressRoute Direct 资源创建授权：

az network express-route port authorization create --express-route-port <Name> --resource-group <ResourceGroupName> --name <AuthName>

示例输出：

 "name": "ERDirectAuthorization_1",
 "id": "/subscriptions/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e/resourceGroups/erdirect-rg/providers/Microsoft.Network/expressRoutePorts/erdirect/authorizations/ERDirectAuthorization_1",
 "authorizationKey": "aaaaaaaa-0b0b-1c1c-2d2d-333333333333",
 "authorizationUseStatus": "Available",
 "provisioningState": "Succeeded"
 // ... other fields

验证是否已成功创建授权：

az network express-route port authorization show --express-route-port <Name> --resource-group <ResourceGroupName> --name <AuthName>

获取授权以在其他订阅或 Microsoft Entra 租户中创建 ExpressRoute Direct 电路：

az account set --subscription "<TargetSubscriptionID or SubscriptionName>"

az network express-route create \
    --name <CircuitName> \
    --resource-group <RGName> \
    --location <Location> \
    --bandwidth <BandwidthInGbps> \
    --sku-tier <SkuTier> \
    --sku-family <SkuFamily> \
    --peering-location <PeeringLocation> \
    --express-route-port <ExpressRoutePortResourceId> \
    --authorization-key <AuthorizationKey>

后续步骤

创建 ExpressRoute 线路后，你可以将虚拟网络链接到 ExpressRoute 线路。
详细了解 ExpressRoute Direct。

Last updated on 2026-03-10

通过

创建 Azure ExpressRoute Direct

在您开始之前

创建 ExpressRoute Direct 资源

生成授权书 (LOA)

Azure PowerShell

更改链路的管理状态

创建电路

在另一个订阅中启用 ExpressRoute Direct 和线路

后续步骤

其他资源