azure-expressroute

name	azure-expressroute
description	Expert knowledge for Azure ExpressRoute development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when designing ExpressRoute circuits/gateways, BGP routing/Global Reach, VPN coexistence, QoS, or MACsec/IPsec, and other Azure ExpressRoute related development tasks. Not for Azure Internet Peering (use azure-internet-peering), Azure Virtual WAN (use azure-virtual-wan), Azure VPN Gateway (use azure-vpn-gateway), Azure Virtual Network (use azure-virtual-network).
compatibility	Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation.
metadata	{"generated_at":"2026-08-09","generator":"docs2skills/1.0.0"}

Azure ExpressRoute Skill

This skill provides expert guidance for Azure ExpressRoute. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

• Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
• Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

Category	Lines	Description
Troubleshooting	L37-L42	Troubleshooting ExpressRoute resiliency and asymmetric routing issues, plus FAQs on connectivity models, supported services, bandwidth, and pricing to resolve design or outage-related questions.
Best Practices	L43-L50	Guidance on ExpressRoute operations: scaling circuit bandwidth, using BGP communities for complex topologies, applying QoS for Skype voice, and migrating legacy gateways to new hardware.
Decision Making	L51-L58	Guidance on choosing ExpressRoute connectivity models, VNets and gateways, planning gateway SKU changes, and estimating/managing ExpressRoute costs.
Architecture & Design Patterns	L59-L70	Designing resilient, highly available ExpressRoute architectures, including DR patterns, multi-circuit routing/Global Reach, VPN coexistence and failover, and using Microsoft peering for PSTN.
Limits & Quotas	L71-L79	ExpressRoute limits on bandwidth, routes, gateways, FastPath, provider rate limiting, plus monitoring and FAQs to avoid hitting connectivity and quota constraints.
Security	L80-L89	Encryption (IPsec, MACsec), NAT rules, RBAC roles, and security best practices for protecting ExpressRoute circuits and traffic
Configuration	L90-L124	Configuring ExpressRoute circuits, gateways, routing/peering (incl. IPv6, BFD, NAT, Global Reach), monitoring, resiliency, and coexisting with VPN, using Portal, PowerShell, and CLI.
Integrations & Coding Patterns	L125-L131	Automating ExpressRoute circuit creation/management with PowerShell or Azure CLI, and configuring a site-to-site VPN that runs over ExpressRoute Microsoft peering.
Deployment	L132-L140	Guides for deploying and migrating ExpressRoute circuits and gateways, including Direct SKUs, zone/AZ-enabled gateways, and automation via ARM templates and Terraform.

Troubleshooting

Topic	URL
Test and validate resiliency of redundant ExpressRoute circuits	https://learn.microsoft.com/en-us/azure/expressroute/evaluate-circuit-resiliency
Diagnose and resolve asymmetric routing with ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-asymmetric-routing

Best Practices

Topic	URL
Best practices for upgrading ExpressRoute circuit bandwidth	https://learn.microsoft.com/en-us/azure/expressroute/about-upgrade-circuit-bandwidth
Manage complex ExpressRoute networks using BGP communities	https://learn.microsoft.com/en-us/azure/expressroute/bgp-communities
Apply QoS requirements for Skype voice over ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-qos
Migrate legacy ExpressRoute gateway connections to new hardware	https://learn.microsoft.com/en-us/azure/expressroute/howto-recreate-connections

Decision Making

Topic	URL
Select and configure ExpressRoute virtual network gateways	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-network-gateways
Choose the right Azure ExpressRoute connectivity model	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-connectivity-models
Plan and manage Azure ExpressRoute costs	https://learn.microsoft.com/en-us/azure/expressroute/plan-manage-cost
Choose VNet connectivity options over ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/virtual-network-connectivity-guidance

Architecture & Design Patterns

Topic	URL
Design resilient Azure ExpressRoute network architectures	https://learn.microsoft.com/en-us/azure/expressroute/design-architecture-for-resiliency
Design disaster recovery with Azure ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/designing-for-disaster-recovery-with-expressroute-privatepeering
Architect high availability for Azure ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/designing-for-high-availability-with-expressroute
Connect multiple ExpressRoute circuits with Global Reach	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-global-reach
Optimize routing across multiple ExpressRoute circuits	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-optimize-routing
Architect coexisting ExpressRoute and S2S VPN connections	https://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portal
Design S2S VPN backup for ExpressRoute private peering	https://learn.microsoft.com/en-us/azure/expressroute/use-s2s-vpn-as-backup-for-expressroute-privatepeering
Use ExpressRoute Microsoft peering for PSTN services	https://learn.microsoft.com/en-us/azure/expressroute/using-expressroute-for-microsoft-pstn

Limits & Quotas

Topic	URL
Evaluate Azure ExpressRoute FastPath limits and usage	https://learn.microsoft.com/en-us/azure/expressroute/about-fastpath
Azure ExpressRoute FAQs on limits and connectivity details	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-faqs
Monitor ExpressRoute advertised routes to avoid limits	https://learn.microsoft.com/en-us/azure/expressroute/how-to-custom-route-alert
Understand rate limiting on provider-based ExpressRoute circuits	https://learn.microsoft.com/en-us/azure/expressroute/provider-rate-limit
ExpressRoute scalable gateway features and limits	https://learn.microsoft.com/en-us/azure/expressroute/scalable-gateway

Security

Topic	URL
Use encryption options with Azure ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-encryption
Configure IPsec transport mode over ExpressRoute for Windows	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-ipsec-transport-private-windows
Configure MACsec security for Azure ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-macsec
Apply NAT requirements for Azure ExpressRoute circuits	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-nat
Roles and permissions for ExpressRoute resources	https://learn.microsoft.com/en-us/azure/expressroute/roles-permissions
Apply security best practices to Azure ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/secure-expressroute

Configuration

Topic	URL
Establish private ExpressRoute peering to an Azure VNet	https://learn.microsoft.com/en-us/azure/expressroute/configure-expressroute-private-peering
Configure customer-controlled maintenance windows for ExpressRoute gateways	https://learn.microsoft.com/en-us/azure/expressroute/customer-controlled-gateway-maintenance
Configure BFD settings for Azure ExpressRoute private peering	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-bfd
Configure NAT on Cisco and Juniper for ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-config-samples-nat
Configure on-premises routers for Azure ExpressRoute	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-config-samples-routing
Configure Azure ExpressRoute virtual network gateways in portal	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-add-gateway-portal-resource-manager
Manage ExpressRoute virtual network gateways with PowerShell	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-add-gateway-resource-manager
Add IPv6 support to ExpressRoute private peering	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-add-ipv6
Configure coexisting ExpressRoute and S2S VPN connections (classic)	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-classic
Configure coexisting ExpressRoute and S2S VPN gateways	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager

Integrations & Coding Patterns

Topic	URL
Programmatically manage ExpressRoute circuits using Azure CLI	https://learn.microsoft.com/en-us/azure/expressroute/howto-circuit-cli
Create and manage ExpressRoute circuits using Azure CLI	https://learn.microsoft.com/en-us/azure/expressroute/howto-circuit-cli
Configure S2S VPN over ExpressRoute Microsoft peering	https://learn.microsoft.com/en-us/azure/expressroute/site-to-site-vpn-over-microsoft-peering

Deployment

Topic	URL
Migrate production workloads to a new ExpressRoute circuit	https://learn.microsoft.com/en-us/azure/expressroute/circuit-migration
Understand ExpressRoute Direct SKUs and technical requirements	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-erdirect-about
Deploy an Azure ExpressRoute circuit via ARM template	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-resource-manager-template
Migrate to zone-redundant ExpressRoute gateway SKUs	https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-gateway-migration-portal
Migrate ExpressRoute gateways to AZ-enabled SKUs	https://learn.microsoft.com/en-us/azure/expressroute/gateway-migration
Provision ExpressRoute circuit and gateway using Terraform	https://learn.microsoft.com/en-us/azure/expressroute/quickstart-create-expressroute-vnet-terraform