Multihop Routing in Azure

Article
12/05/2014

There is some great documentation on how to Configure a Multi-Site VPN connection in Azure. I wanted to configure a similar scenario using a design other than the Full Mesh (single hop) model specified in the MSDN documentation. I also want every Virtual Network (vNet) in my environment to be able to route to any other vNet within the design. I successfully configured Hub & Spoke, Daisy Chain, and Full Mesh models and I thought my configuration specifics might be useful for the community.

I used vNets in all my examples for simplicity and I should point out that these can go across subscriptions. If one of the networks in your scenario happens to be an on premise environment the XML pretty much looks the same, you’ll just need to specify your public IP instead of the gateway IP for VPNGatewayAddress, download the script for your device (which must support dynamic routing), and configure your device for the VPN connection.

To test out one of the configurations complete the following steps:

Choose which scenario you want to test (Full Mesh, Hub and Spoke, or Daisy Chain) and download the attached XML file for that scenario
Logon to the legacy Azure portal and go to Networks
If you have existing vNets, Local Networks, or DNS Servers configured then click Export
- Manually merge the XML from the scenario you want to test into your existing network configuration XML
Select New\Import Configuration
- Choose the network configuration XML file you want to use and click Open
- Click Next and OK
Select each vNet
- Click Create Gateway (If it prompts you for a choice pick Dynamic)
- Make sure this is done for each vNet, it should take 15-20 minutes for each gateway to get created
Once all the gateways are provisioned go back to Networks and Click Export
Modify the VPNGatewayAddress for each LocalNetworkSite to match the Gateway IP Address for each applicable vNet
- You can get the Gateway IP Address for each vNet by selecting the vNet under Networks and viewing the Dashboard
Select New\Import Configuration
- Choose the network configuration XML file with the correct Gateway IPs and click Open
- Click Next and OK
Open Azure PowerShell, logon to your subscription, and run the associated Gateway Key PowerShell commands to exchange the keys for each gateway. Note, you should change the shared key in the command to something more secure.
After 5 minutes or so go under each vNet and validate that the Gateway status is Connected for each local network
To further validate connectivity spin up VMs in each vNet and confirm that they can ping each other after allowing ICMP traffic through any configured firewalls.

Full Mesh

The full mesh, single hop, model is the easiest to configure but can be problematic at scale as each vNet is limited to 10 connections each. Update – We can now create High Performance VPN Gateways which support up to 30 S2S connections. They can be created with PowerShell:

New-AzureVNetGateway –VNetName vNet1 –GatewaySKU HighPerformance –GatewayType DynamicRouting

Network Table

Virtual Network	Address Space	Subnet Name	Subnet
vNet1	10.0.0.0/22	vNet1FE	10.0.0.0/24
		vNet1BE	10.0.1.0/24
		GatewaySubnet	10.0.3.240/28
vNet2	10.0.4.0/22	vNet2FE	10.0.4.0/24
		vNet2BE	10.0.5.0/24
		GatewaySubnet	10.0.7.240/28
vNet3	10.0.8.0/22	vNet3FE	10.0.8.0/24
		vNet3BE	10.0.9.0/24
		GatewaySubnet	10.0.11.240/28
vNet4	10.0.12.0/22	vNet4FE	10.0.12.0/24
		vNet4BE	10.0.13.0/24
		GatewaySubnet	10.0.15.240/28

Gateway Key Commands

Set-AzureVNetGatewayKey -VNetName vNet1 -LocalNetworkSiteName LocalvNet2 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet1 -LocalNetworkSiteName LocalvNet3 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet1 -LocalNetworkSiteName LocalvNet4 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet2 -LocalNetworkSiteName LocalvNet1 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet2 -LocalNetworkSiteName LocalvNet3 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet2 -LocalNetworkSiteName LocalvNet4 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet3 -LocalNetworkSiteName LocalvNet1 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet3 -LocalNetworkSiteName LocalvNet2 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet3 -LocalNetworkSiteName LocalvNet4 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet4 -LocalNetworkSiteName LocalvNet1 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet4 -LocalNetworkSiteName LocalvNet2 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet4 -LocalNetworkSiteName LocalvNet3 -SharedKey mykey

Network Configuration

 <NetworkConfiguration xmlns:xsd="https://www.w3.org/2001/XMLSchema" xmlns:xsi="https://www.w3.org/2001/XMLSchema-instance" xmlns="https://schemas.microsoft.com/ServiceHosting/2011/07/NetworkConfiguration">
  <VirtualNetworkConfiguration>
    <LocalNetworkSites>
      <LocalNetworkSite name="LocalvNet1">
        <AddressSpace>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.1</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet2">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.2</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet3">
        <AddressSpace>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.3</VPNGatewayAddress>
      </LocalNetworkSite>      
      <LocalNetworkSite name="LocalvNet4">
        <AddressSpace>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.4</VPNGatewayAddress>
      </LocalNetworkSite>
    </LocalNetworkSites>
    <VirtualNetworkSites>
      <VirtualNetworkSite name="vNet1" Location="East US">
        <AddressSpace>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet1FE">
            <AddressPrefix>10.0.0.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet1BE">
            <AddressPrefix>10.0.1.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.3.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet2">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet3">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet4">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet2" Location="East US">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet2FE">
            <AddressPrefix>10.0.4.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet2BE">
            <AddressPrefix>10.0.5.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.7.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet1">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet3">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet4">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet3" Location="West US">
        <AddressSpace>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet3FE">
            <AddressPrefix>10.0.8.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet3BE">
            <AddressPrefix>10.0.9.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.11.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet1">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet2">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet4">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet4" Location="West US">
        <AddressSpace>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet4FE">
            <AddressPrefix>10.0.12.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet4BE">
            <AddressPrefix>10.0.13.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.15.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet1">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet2">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet3">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
    </VirtualNetworkSites>
  </VirtualNetworkConfiguration>
</NetworkConfiguration>

Hub and Spoke

Network Table

Virtual Network	Address Space	Subnet Name	Subnet
vNet1	10.0.0.0/22	vNet1FE	10.0.0.0/24
		vNet1BE	10.0.1.0/24
		GatewaySubnet	10.0.3.240/28
vNet2	10.0.4.0/22	vNet2FE	10.0.4.0/24
		vNet2BE	10.0.5.0/24
		GatewaySubnet	10.0.7.240/28
vNet3	10.0.8.0/22	vNet3FE	10.0.8.0/24
		vNet3BE	10.0.9.0/24
		GatewaySubnet	10.0.11.240/28
vNet4	10.0.12.0/22	vNet4FE	10.0.12.0/24
		vNet4BE	10.0.13.0/24
		GatewaySubnet	10.0.15.240/28
vNet5	10.0.16.0/22	vNet5FE	10.0.16.0/24
		vNet5BE	10.0.17.0/24
		GatewaySubnet	10.0.19.240/28
vNet6	10.0.20.0/22	vNet6FE	10.0.20.0/24
		vNet6BE	10.0.21.0/24
		GatewaySubnet	10.0.23.240/28

Gateway Key Commands

Set-AzureVNetGatewayKey -VNetName vNet1 -LocalNetworkSiteName LocalvNet3 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet1 -LocalNetworkSiteName LocalvNet4 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet1 -LocalNetworkSiteName LocalvNet256 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet2 -LocalNetworkSiteName LocalvNet5 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet2 -LocalNetworkSiteName LocalvNet6 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet2 -LocalNetworkSiteName LocalvNet134 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet3 -LocalNetworkSiteName LocalvNet12456 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet4 -LocalNetworkSiteName LocalvNet12356 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet5 -LocalNetworkSiteName LocalvNet26134 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet6 -LocalNetworkSiteName LocalvNet25134 -SharedKey mykey

Network Configuration

 <NetworkConfiguration xmlns:xsd="https://www.w3.org/2001/XMLSchema" xmlns:xsi="https://www.w3.org/2001/XMLSchema-instance" xmlns="https://schemas.microsoft.com/ServiceHosting/2011/07/NetworkConfiguration">
  <VirtualNetworkConfiguration>
    <LocalNetworkSites>
      <LocalNetworkSite name="LocalvNet12456">
        <AddressSpace>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
          <AddressPrefix>10.0.16.0/22</AddressPrefix>
          <AddressPrefix>10.0.20.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.1</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet12356">
        <AddressSpace>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
          <AddressPrefix>10.0.16.0/22</AddressPrefix>
          <AddressPrefix>10.0.20.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.1</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet134">
        <AddressSpace>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.1</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet26134">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
          <AddressPrefix>10.0.20.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.2</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet25134">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
          <AddressPrefix>10.0.16.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.2</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet256">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
          <AddressPrefix>10.0.16.0/22</AddressPrefix>
          <AddressPrefix>10.0.20.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.2</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet3">
        <AddressSpace>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.3</VPNGatewayAddress>
      </LocalNetworkSite>      
      <LocalNetworkSite name="LocalvNet4">
        <AddressSpace>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.4</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet5">
        <AddressSpace>
          <AddressPrefix>10.0.16.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.5</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet6">
        <AddressSpace>
          <AddressPrefix>10.0.20.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.6</VPNGatewayAddress>
      </LocalNetworkSite>
    </LocalNetworkSites>
    <VirtualNetworkSites>
      <VirtualNetworkSite name="vNet1" Location="East US">
        <AddressSpace>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet1FE">
            <AddressPrefix>10.0.0.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet1BE">
            <AddressPrefix>10.0.1.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.3.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet3">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet4">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet256">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet2" Location="West US">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet2FE">
            <AddressPrefix>10.0.4.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet2BE">
            <AddressPrefix>10.0.5.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.7.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet5">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet6">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet134">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet3" Location="East US">
        <AddressSpace>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet3FE">
            <AddressPrefix>10.0.8.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet3BE">
            <AddressPrefix>10.0.9.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.11.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet12456">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet4" Location="East US">
        <AddressSpace>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet4FE">
            <AddressPrefix>10.0.12.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet4BE">
            <AddressPrefix>10.0.13.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.15.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet12356">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet5" Location="West US">
        <AddressSpace>
          <AddressPrefix>10.0.16.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet5FE">
            <AddressPrefix>10.0.16.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet5BE">
            <AddressPrefix>10.0.17.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.19.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet26134">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet6" Location="West US">
        <AddressSpace>
          <AddressPrefix>10.0.20.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet6FE">
            <AddressPrefix>10.0.20.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet6BE">
            <AddressPrefix>10.0.21.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.23.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet25134">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
    </VirtualNetworkSites>
  </VirtualNetworkConfiguration>
</NetworkConfiguration>

Daisy Chain

Network Table

Virtual Network	Address Space	Subnet Name	Subnet
vNet1	10.0.0.0/22	vNet1FE	10.0.0.0/24
		vNet1BE	10.0.1.0/24
		GatewaySubnet	10.0.3.240/28
vNet2	10.0.4.0/22	vNet2FE	10.0.4.0/24
		vNet2BE	10.0.5.0/24
		GatewaySubnet	10.0.7.240/28
vNet3	10.0.8.0/22	vNet3FE	10.0.8.0/24
		vNet3BE	10.0.9.0/24
		GatewaySubnet	10.0.11.240/28
vNet4	10.0.12.0/22	vNet4FE	10.0.12.0/24
		vNet4BE	10.0.13.0/24
		GatewaySubnet	10.0.15.240/28

Gateway Key Commands

Set-AzureVNetGatewayKey -VNetName vNet1 -LocalNetworkSiteName LocalvNet234 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet2 -LocalNetworkSiteName LocalvNet1 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet2 -LocalNetworkSiteName LocalvNet34 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet3 -LocalNetworkSiteName LocalvNet21 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet3 -LocalNetworkSiteName LocalvNet4 -SharedKey mykey

Set-AzureVNetGatewayKey -VNetName vNet4 -LocalNetworkSiteName LocalvNet321 -SharedKey mykey

Network Configuration

 <NetworkConfiguration xmlns:xsd="https://www.w3.org/2001/XMLSchema" xmlns:xsi="https://www.w3.org/2001/XMLSchema-instance" xmlns="https://schemas.microsoft.com/ServiceHosting/2011/07/NetworkConfiguration">
  <VirtualNetworkConfiguration>
    <LocalNetworkSites>
      <LocalNetworkSite name="LocalvNet1">
        <AddressSpace>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.1</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet234">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.2</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet21">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.2</VPNGatewayAddress>
      </LocalNetworkSite>      
      <LocalNetworkSite name="LocalvNet34">
        <AddressSpace>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.3</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet321">
        <AddressSpace>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.3</VPNGatewayAddress>
      </LocalNetworkSite>
      <LocalNetworkSite name="LocalvNet4">
        <AddressSpace>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <VPNGatewayAddress>104.45.135.4</VPNGatewayAddress>
      </LocalNetworkSite>
    </LocalNetworkSites>
    <VirtualNetworkSites>
      <VirtualNetworkSite name="vNet1" Location="East US">
        <AddressSpace>
          <AddressPrefix>10.0.0.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet1FE">
            <AddressPrefix>10.0.0.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet1BE">
            <AddressPrefix>10.0.1.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.3.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet234">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet2" Location="East US">
        <AddressSpace>
          <AddressPrefix>10.0.4.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet2FE">
            <AddressPrefix>10.0.4.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet2BE">
            <AddressPrefix>10.0.5.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.7.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet1">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet34">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet3" Location="West US">
        <AddressSpace>
          <AddressPrefix>10.0.8.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet3FE">
            <AddressPrefix>10.0.8.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet3BE">
            <AddressPrefix>10.0.9.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.11.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet21">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
            <LocalNetworkSiteRef name="LocalvNet4">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
      <VirtualNetworkSite name="vNet4" Location="West US">
        <AddressSpace>
          <AddressPrefix>10.0.12.0/22</AddressPrefix>
        </AddressSpace>
        <Subnets>
          <Subnet name="vNet4FE">
            <AddressPrefix>10.0.12.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="vNet4BE">
            <AddressPrefix>10.0.13.0/24</AddressPrefix>
          </Subnet>
          <Subnet name="GatewaySubnet">
            <AddressPrefix>10.0.15.240/28</AddressPrefix>
          </Subnet>
        </Subnets>
        <Gateway>
          <ConnectionsToLocalNetwork>
            <LocalNetworkSiteRef name="LocalvNet321">
              <Connection type="IPsec" />
            </LocalNetworkSiteRef>
          </ConnectionsToLocalNetwork>
        </Gateway>
      </VirtualNetworkSite>
    </VirtualNetworkSites>
  </VirtualNetworkConfiguration>
</NetworkConfiguration>

NetworkConfig.zip

Multihop Routing in Azure

Additional resources