https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vnet-transit-deployment-guide-with-express-route-gatewaysubnet/m-p/345349#M935 <P>Hello,</P><P>&nbsp;</P><P>In order to integrate the Palo Alto Azure VM Series solution into my hub and spoke architecture, I followed the steps described in the deployment guide "azure-transit-vnet-deployment-guide-common-firewall-option.pdf" . Having already active Express Route connectivity I am stuck in section "13.1 - Configure Azure User-Defined Routes". I have created the UDR component well and added the routes described in the guide.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="misterxiao_1-1598350653374.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/27492i8331D29695636520/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="misterxiao_1-1598350653374.png" alt="misterxiao_1-1598350653374.png" /></span></P><P>My problem occurs when I want to associate the created UDR to the subnet "GatewaySubnet", the association is not possible because of the following error message :</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="misterxiao_2-1598350780862.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/27493i77DE7BCB11045CAD/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="misterxiao_2-1598350780862.png" alt="misterxiao_2-1598350780862.png" /></span></P><P>Yet I followed and respected the instructions described in the guide. On the Microsoft side (<A href="https://docs.microsoft.com/en-gb/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings" target="_blank">https://docs.microsoft.com/en-gb/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings</A>), it is recalled that the GatewaySubnet does not support a UDR with a default route 0.0.0.0/0</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="misterxiao_3-1598351070531.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/27494i1403D9D175F2C0FF/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="misterxiao_3-1598351070531.png" alt="misterxiao_3-1598351070531.png" /></span></P><P>&nbsp;</P><P>The deployment guide is dated January 2020 so it is up to date and complies with the best practices recommended by Microsoft. Do you have one or more solutions to my problem? thank you</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 25 Aug 2020 10:27:35 GMT misterxiao 2020-08-25T10:27:35Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vnet-transit-deployment-guide-with-express-route-gatewaysubnet/m-p/345349#M935 <P>Hello,</P><P>&nbsp;</P><P>In order to integrate the Palo Alto Azure VM Series solution into my hub and spoke architecture, I followed the steps described in the deployment guide "azure-transit-vnet-deployment-guide-common-firewall-option.pdf" . Having already active Express Route connectivity I am stuck in section "13.1 - Configure Azure User-Defined Routes". I have created the UDR component well and added the routes described in the guide.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="misterxiao_1-1598350653374.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/27492i8331D29695636520/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="misterxiao_1-1598350653374.png" alt="misterxiao_1-1598350653374.png" /></span></P><P>My problem occurs when I want to associate the created UDR to the subnet "GatewaySubnet", the association is not possible because of the following error message :</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="misterxiao_2-1598350780862.png" style="width: 999px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/27493i77DE7BCB11045CAD/image-size/large/is-moderation-mode/true?v=v2&amp;px=999" role="button" title="misterxiao_2-1598350780862.png" alt="misterxiao_2-1598350780862.png" /></span></P><P>Yet I followed and respected the instructions described in the guide. On the Microsoft side (<A href="https://docs.microsoft.com/en-gb/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings" target="_blank">https://docs.microsoft.com/en-gb/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings</A>), it is recalled that the GatewaySubnet does not support a UDR with a default route 0.0.0.0/0</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="misterxiao_3-1598351070531.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/27494i1403D9D175F2C0FF/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="misterxiao_3-1598351070531.png" alt="misterxiao_3-1598351070531.png" /></span></P><P>&nbsp;</P><P>The deployment guide is dated January 2020 so it is up to date and complies with the best practices recommended by Microsoft. Do you have one or more solutions to my problem? thank you</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 25 Aug 2020 10:27:35 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/vnet-transit-deployment-guide-with-express-route-gatewaysubnet/m-p/345349#M935 misterxiao 2020-08-25T10:27:35Z