Express Route的配置

ExpressRoute在中国已经Preview了。

本篇文章讲介绍ExpressRoute如何配置。

Express Route的逻辑拓扑结构：

在配置Express Route之前，需要做VLAN和IP地址的规划：

Router	IP Prefix	Peering	VLAN ID
Primary	172.16.1.0/30	Private	555
Secondary	172.16.2.0/30	Private	555
Primary	172.16.1.4/30	Public	556
Secondary	172.16.2.4/30	Public	556

由于Express Route要求都是冗余配置，所以所有的内容都是两个:两个VLAN，两根链接，public/private peering。

规划好后，在Azure上做如下配置：

1. 在Powershell里import Expressroute的模块：

   Import-Module 'C:\Program Files (x86)\Microsoft SDKs\Azure\PowerShell\ServiceManagement\Azure\ExpressRoute\ExpressRoute.psd1'

2. 用PowerShell在Azure上查看ExpressRoute的服务情况：

   Get-AzureDedicatedCircuitServiceProvider

    

   Name DedicatedCircuitLocations DedicatedCircuitBandwidths

   ---- ------------------------- --------------------------

   Beijing Telecom Ethernet Beijing 200Mbps:200, 500Mbps:500, 1Gbps:1000, 10Gbps:10000

3. 在Beijing创建200M的Circuit

   New-AzureDedicatedCircuit -CircuitName hwtest200 -Bandwidth 200 -Location Beijing -ServiceProviderName "Beijing Telecom Ethernet"

   CircuitName            : hwtest200

   Location                : Beijing

   ServiceKey                : xxxxxxxxxxxxx

   ServiceProviderName        : beijing telecom ethernet

   ServiceProviderProvisioningState    : NotProvisioned

   Sku                : Standard

   Status                 : Enabled

   其中SeviceKey是标识这条Circuit的唯一标识符，需要把串数字提供给电信。

   目前的状态是NotProvisioned，等电信做好专线后，其状态将转换为Provisoned。

4. 定义变量

   在Powershell中定义变量：

   $ServiceKey = "02a830bf-817d-45fd-b5dd-08312cf61682"

   $MD5Hash = "dfeaf10390e560aea745ccba53e044ed"

   $private_Subnet_Primary = "172.16.1.0/30"

   $private_Subnet_Secondary = "172.16.2.0/30"

   $public_Subnet_Primary = "172.16.1.4/30"

   $public_Subnet_Secondary = "172.16.2.4/30"

   $ASN = 65002

   $VLANPrivate = "555"

   $VLANPublic = "556"

5. 部署BGP Private Peering的配置

   New-AzureBGPPeering -ServiceKey $ServiceKey `

   -PrimaryPeerSubnet $private_Subnet_Primary `

   -SecondaryPeerSubnet $private_Subnet_Secondary `

   -PeerAsn $ASN `

   -VlanId $VLANPrivate `

   –AccessType Private

    

   AdvertisedPublicPrefixes         :

   AdvertisedPublicPrefixesState         :

   AzureAsn             : 12076

   CustomerAutonomousSystemNumber     : 0

   PeerAsn             : 65002

   PrimaryAzurePort             : BTEXP-BJB-06GMR-CIS-1-PRI-A

   PrimaryPeerSubnet         : 172.16.1.0/30

   RoutingRegistryName         :

   SecondaryAzurePort         : BTEXP-BJB-06GMR-CIS-2-SEC-A

   SecondaryPeerSubnet         : 172.16.2.0/30

   State             : Enabled

   VlanId             : 555

6. 部署BGP Public Peering的配置

   New-AzureBGPPeering -ServiceKey $ServiceKey `

   -PrimaryPeerSubnet $public_Subnet_Primary `

   -SecondaryPeerSubnet $public_Subnet_Secondary `

   -PeerAsn $ASN `

   -VlanId $VLANPublic `

   -AccessType Public

   AdvertisedPublicPrefixes         :

   AdvertisedPublicPrefixesState         :

   AzureAsn              : 12076

   CustomerAutonomousSystemNumber     : 0

   PeerAsn             : 65002

   PrimaryAzurePort             : BTEXP-BJB-06GMR-CIS-1-PRI-A

   PrimaryPeerSubnet         : 172.16.1.4/30

   RoutingRegistryName         :

   SecondaryAzurePort         : BTEXP-BJB-06GMR-CIS-2-SEC-A

   SecondaryPeerSubnet         : 172.16.2.4/30

   State             : Enabled

   VlanId             : 556

7. 把Vnet和ExpressRoute的Circuit建立连接

   New-AzureDedicatedCircuitLink -ServiceKey $ServiceKey -VNetName $Vnet