Access the nva loopback interface via peering

Rodrigo R 86

Hi community,

In the example, vm-test in vnet-C should access the nva loopback in vnet-A.

I have tried peering the vnet-C <-> vnet-B and vnet-B <-> vnet-A set the UDRs but the loopback is unreachable.

Likewise, I have also tried peering the vnet-C <-> directly with vnet-A still unreachable.

I'd like to know if it is possible to access a virtual interface in a NVA through a peering.

User's image BR,

Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-10-15T13:57:44.3966667+00:00

Hi @Rodrigo R,

Welcome to the Microsoft Q&A Platform. Thank you for posting your query here. We are looking into it and will get back to you soon.

Thanks,

Sai Prasanna.
Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-10-16T05:06:34.3166667+00:00
Hi @rodrigo rb

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Could you please follow the below steps and try to access the interface:

Deploy a Virtual WAN by giving RG, Name and Type (Standard).

Go to vWAN > Connectivity > Hubs > Deploy a Hub. (Make sure give a different IP Address range while deploying hub, which should not overlap with the existing VNets).

Go to Connectivity > Virtual Network Connections > Click on Add connection and add three connections for your 3 VNets.

Once the Virtual networks added to the Hub of vWAN, the 3 VNets are peered together and able to access each other. For your reference: https://learn.microsoft.com/en-us/azure/virtual-wan/how-to-nva-hub#openvwan https://learn.microsoft.com/en-us/azure/virtual-wan/about-virtual-hub-routing#:~:text=Hub%20virtual%20network%20connection%3A%20Connects%20virtual%20networks%20to%20a%20virtual%20hub

If you have any further queries, do let us know. If the answer is helpful, please click "Accept Answer" and "Upvote it."

Thanks,

Sai Prasanna.
Rodrigo R 86 Reputation points

2024-10-16T11:20:13.88+00:00

Hello @Sai Prasanna Sinde ,

There is no vWAN in the mentioned topology, and we would not like to use it. Just two third party firewalls deployed in two different regions.

As I said, we need to connect from one side to another on the loopback interface. The rest of communication works well.

Regards,
Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-10-23T01:44:59.45+00:00

Hi @rodrigo rb,

Hope you are having a great day.

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If you are still facing any further issues, please don't hesitate to reach out to us. We are happy to assist you.

Looking forward to your response and appreciate your time on this.

Regards,

Sai Prasanna.
Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-10-24T07:37:41.1366667+00:00

Hi @rodrigo rb,

Greetings!

Just checking in to see if you have got a chance to see my response to your question in resolving the issue.

If you are still facing any further issues, please don't hesitate to reach out to us. We are happy to assist you.

Looking forward to your response and appreciate your time on this.

Regards,

Sai Prasanna.
Rodrigo R 86 Reputation points

2024-10-24T09:00:51.61+00:00

Hello @Sai Prasanna Sinde (Quadrant Resource LLC) ,

I am checking with my nva vendor if this kind of connection is possible on Azure cloud.

Thank you for the support! I think from Microsoft side the question is answered.

Regards,
Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-10-24T09:14:22.6233333+00:00

Hi @rodrigo rb,Thanks for confirming.

I have converted my comment into an answer.

I would appreciate it if you could accept the response as a "Accept Answer" and "Upvote it" so that it can help other members of the community who may be experiencing similar challenges.

Your contribution is highly appreciated.

Thanks,

Sai Prasanna.

Accepted answer

Sai Prasanna Sinde 2,680 Reputation points Microsoft Vendor

2024-10-21T11:35:07.2766667+00:00
Hi @rodrigo rb,

Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

Answering your queries,

You can deploy an Azure Firewall in vnet-B and point traffic from vnet-C to vnet-B and from vnet-B it will go to vnet-A.

From vnet-A, add a UDR and point it to azure firewall in vnet-B.

This way the firewall will act as an interface sending the traffic between both sides.

Regarding NVA loopback, as we don't deal with it, please contact your vendor, they might help you with it.

Kindly let us know if the above helps or you need further assistance on this issue.

If so, I would appreciate it if you could accept the response as a "Accept Answer" and "Upvote it" so that it can help other members of the community who may be experiencing similar challenges.

Thanks,

Sai Prasanna.
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Access the nva loopback interface via peering

0 additional answers

Your answer