/azure-expressroute

name: azure-expressroute
description: Expert knowledge for Azure ExpressRoute development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when planning ExpressRoute bandwidth/gateways, configuring BGP/NAT, deploying circuits via ARM/Terraform, or automating CLI-based management, and other Azure ExpressRoute related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual WAN (use azure-virtual-wan), Azure VPN Gateway (use azure-vpn-gateway), Azure Internet Peering (use azure-internet-peering).
compatibility: Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata:
  generated_at: "2026-10-18"
  generator: "docs2skills/1.0.0"

Azure ExpressRoute Skill

This skill provides expert guidance for Azure ExpressRoute. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file

> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)

This skill requires **network access** to fetch documentation content:

• **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.
• **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.

Category Index

| Category | Lines | Description | |----------|-------|-------------| | Troubleshooting | L37-L42 | Troubleshooting ExpressRoute resiliency and asymmetric routing issues, plus FAQs on connectivity models, supported services, bandwidth, and pricing to resolve design or outage-related questions. | | Best Practices | L43-L53 | Best practices for ExpressRoute capacity planning, QoS, BGP communities, gateway hardware migration, and validating resiliency via gateway and circuit failover testing. | | Decision Making | L54-L62 | Guidance on choosing and configuring ExpressRoute gateways, SKUs, resiliency/topology options, VNet connectivity patterns, and planning/managing ExpressRoute-related costs. | | Architecture & Design Patterns | L63-L74 | Designing resilient, highly available ExpressRoute architectures, including DR patterns, multi-circuit routing/Global Reach, VPN coexistence and failover, and using Microsoft peering for PSTN. | | Limits & Quotas | L75-L84 | ExpressRoute bandwidth, route, and gateway limits; FastPath usage; provider rate limiting; monitoring advertised routes; and FAQs on staying within connectivity quotas. | | Security | L85-L93 | Encryption and security for ExpressRoute: IPsec/MACsec setup, NAT requirements, RBAC roles/permissions, and applying network security controls to private circuits. | | Configuration | L94-L122 | Configuring ExpressRoute circuits, gateways, routing/peering, BGP (incl. IPv6, communities, BFD), NAT, monitoring, resiliency, and coexistence with VPN using portal, CLI, and PowerShell | | Integrations & Coding Patterns | L123-L130 | Configuring and automating ExpressRoute circuits and connectivity, including Azure CLI management, NAT setups for Cisco/Juniper, and S2S VPN over Microsoft peering. | | Deployment | L131-L138 | Guides for deploying and migrating ExpressRoute circuits/gateways, including Direct SKUs, zone/AZ-enabled gateways, and ARM/Terraform-based provisioning and traffic migration. |

Troubleshooting

| Topic | URL | |-------|-----| | Test and validate resiliency of redundant ExpressRoute circuits | https://learn.microsoft.com/en-us/azure/expressroute/evaluate-circuit-resiliency | | Diagnose and resolve asymmetric routing with ExpressRoute | https://learn.microsoft.com/en-us/azure/expressroute/expressroute-asymmetric-routing |

Best Practices

| Topic | URL | |-------|-----| | Apply best practices for ExpressRoute bandwidth upgrades | https://learn.microsoft.com/en-us/azure/expressroute/about-upgrade-circuit-bandwidth | | Manage complex ExpressRoute networks using BGP communities | https://learn.microsoft.com/en-us/azure/expressroute/bgp-communities | | Apply QoS requirements for Skype voice over ExpressRoute | https://learn.microsoft.com/en-us/azure/expressroute/expressroute-qos | | Migrate legacy ExpressRoute gateway connections to new hardware | https://learn.microsoft.com/en-us/azure/expressroute/howto-recreate-connections | | Use Resiliency Insights to harden ExpressRoute gateways | https://learn.microsoft.com/en-us/azure/expressroute/resiliency-insights | | Validate ExpressRoute gateway resiliency with failover tests | https://learn.microsoft.com/en-us/azure/expressroute/resiliency-validation | | Test and validate Azure ExpressRoute link failover | https://learn.microsoft.com/en-us/azure/expressroute/test-link-failover |

Decision Making

| Topic | URL | |-------|-----| | Select and configure ExpressRoute virtual network gateways | https://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-network-gateways | | Plan and execute ExpressRoute gateway SKU migration | https://learn.microsoft.com/en-us/azure/expressroute/gateway-migration | | Plan and manage Azure ExpressRoute costs | https://learn.microsoft.com/en-us/azure/expressroute/plan-manage-cost