ExpressRoute在中国已经Preview了。
本篇文章讲介绍ExpressRoute如何配置。
Express Route的逻辑拓扑结构：
在配置Express Route之前，需要做VLAN和IP地址的规划：
|
Router |
IP Prefix |
Peering |
VLAN ID |
|
Primary |
172.16.1.0/30 |
Private |
555 |
|
Secondary |
172.16.2.0/30 |
Private |
555 |
|
Primary |
172.16.1.4/30 |
Public |
556 |
|
Secondary |
172.16.2.4/30 |
Public |
556 |
由于Express Route要求都是冗余配置，所以所有的内容都是两个:两个VLAN，两根链接，public/private peering。
规划好后，在Azure上做如下配置：
-
在Powershell里import Expressroute的模块：
Import-Module 'C:Program Files (x86)Microsoft SDKsAzurePowerShellServiceManagementAzureExpressRouteExpressRoute.psd1'
-
用PowerShell在Azure上查看ExpressRoute的服务情况：
Get-AzureDedicatedCircuitServiceProvider
Name DedicatedCircuitLocations DedicatedCircuitBandwidths
---- ------------------------- --------------------------
Beijing Telecom Ethernet Beijing 200Mbps:200, 500Mbps:500, 1Gbps:1000, 10Gbps:10000
-
在Beijing创建200M的Circuit
New-AzureDedicatedCircuit -CircuitName hwtest200 -Bandwidth 200 -Location Beijing -ServiceProviderName "Beijing Telecom Ethernet"
CircuitName : hwtest200
Location : Beijing
ServiceKey : xxxxxxxxxxxxx
ServiceProviderName : beijing telecom ethernet
ServiceProviderProvisioningState : NotProvisioned
Sku : Standard
Status : Enabled
其中SeviceKey是标识这条Circuit的唯一标识符，需要把串数字提供给电信。
目前的状态是NotProvisioned，等电信做好专线后，其状态将转换为Provisoned。
-
定义变量
在Powershell中定义变量：
$ServiceKey = "02a830bf-817d-45fd-b5dd-08312cf61682"
$MD5Hash = "dfeaf10390e560aea745ccba53e044ed"
$private_Subnet_Primary = "172.16.1.0/30"
$private_Subnet_Secondary = "172.16.2.0/30"
$public_Subnet_Primary = "172.16.1.4/30"
$public_Subnet_Secondary = "172.16.2.4/30"
$ASN = 65002
$VLANPrivate = "555"
$VLANPublic = "556"
-
部署BGP Private Peering的配置
New-AzureBGPPeering -ServiceKey $ServiceKey `
-PrimaryPeerSubnet $private_Subnet_Primary `
-SecondaryPeerSubnet $private_Subnet_Secondary `
-PeerAsn $ASN `
-VlanId $VLANPrivate `
–AccessType Private
AdvertisedPublicPrefixes :
AdvertisedPublicPrefixesState :
AzureAsn : 12076
CustomerAutonomousSystemNumber : 0
PeerAsn : 65002
PrimaryAzurePort : BTEXP-BJB-06GMR-CIS-1-PRI-A
PrimaryPeerSubnet : 172.16.1.0/30
RoutingRegistryName :
SecondaryAzurePort : BTEXP-BJB-06GMR-CIS-2-SEC-A
SecondaryPeerSubnet : 172.16.2.0/30
State : Enabled
VlanId : 555
-
部署BGP Public Peering的配置
New-AzureBGPPeering -ServiceKey $ServiceKey `
-PrimaryPeerSubnet $public_Subnet_Primary `
-SecondaryPeerSubnet $public_Subnet_Secondary `
-PeerAsn $ASN `
-VlanId $VLANPublic `
-AccessType Public
AdvertisedPublicPrefixes :
AdvertisedPublicPrefixesState :
AzureAsn : 12076
CustomerAutonomousSystemNumber : 0
PeerAsn : 65002
PrimaryAzurePort : BTEXP-BJB-06GMR-CIS-1-PRI-A
PrimaryPeerSubnet : 172.16.1.4/30
RoutingRegistryName :
SecondaryAzurePort : BTEXP-BJB-06GMR-CIS-2-SEC-A
SecondaryPeerSubnet : 172.16.2.4/30
State : Enabled
VlanId : 556
-
把Vnet和ExpressRoute的Circuit建立连接
New-AzureDedicatedCircuitLink -ServiceKey $ServiceKey -VNetName $Vnet