Hello,
In order to integrate the Palo Alto Azure VM Series solution into my hub and spoke architecture, I followed the steps described in the deployment guide "azure-transit-vnet-deployment-guide-common-firewall-option.pdf" . Having already active Express Route connectivity I am stuck in section "13.1 - Configure Azure User-Defined Routes". I have created the UDR component well and added the routes described in the guide.
My problem occurs when I want to associate the created UDR to the subnet "GatewaySubnet", the association is not possible because of the following error message :
Yet I followed and respected the instructions described in the guide. On the Microsoft side (https://docs.microsoft.com/en-gb/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings), it is recalled that the GatewaySubnet does not support a UDR with a default route 0.0.0.0/0
The deployment guide is dated January 2020 so it is up to date and complies with the best practices recommended by Microsoft. Do you have one or more solutions to my problem? thank you
