Configure Azure Virtual WAN Hub

This guide provides step-by-step instructions on how to configure a Virtual WAN hub in Azure. A Virtual WAN hub is a networking resource that acts as a connectivity, security, and routing centerpiece for your Virtual WAN environment.

Prerequisites

• An Azure subscription.
• An existing Virtual WAN resource. If you don't have one, create it first.
• Appropriate permissions to create and manage networking resources in your Azure subscription.

Steps to Configure a Virtual WAN Hub

Step 1: Navigate to your Virtual WAN Resource

Log in to the Azure portal. Search for "Virtual WAN" in the search bar and select your existing Virtual WAN resource.

Step 2: Create a New Hub

1. 1. In the Virtual WAN overview page, under the "Hubs" section, click on + Create hub.
2. 2. On the "Create hub" page, configure the following settings:
   • Region: Select the Azure region where you want to deploy your hub. Choose a region that is geographically close to your connected resources for optimal performance.
   • Name: Provide a unique name for your hub (e.g., `my-virtualwan-hub-eastus`).
   • Hub private address space: Specify a private IP address range for the hub. This range should not overlap with any of your connected virtual networks. A /24 CIDR is recommended.
   • Virtual hub capacity: Select the desired capacity for your hub. Higher capacity allows for more concurrent connections and higher throughput.
   • Hub routing preference: Choose between "ExpressRoute" and "VPN" for your default routing.
3. 3. Click Review + create.
4. 4. After validation passes, click Create.

Step 3: Understand Hub Components

Once the hub is deployed, you'll see several components within it, including:

• Virtual Network Connections: Used to connect your virtual networks to the hub.
• Site-to-Site VPN Connections: For connecting on-premises networks via VPN.
• ExpressRoute Circuits: For connecting to your private network infrastructure.
• Azure Firewall (Optional): For centralized security and threat protection.
• Network Virtual Appliances (NVAs) (Optional): For advanced networking functions.

Step 4: Connect Virtual Networks to the Hub

To enable connectivity between your virtual networks and the hub, you need to establish Virtual Network Connections:

1. Navigate back to your Virtual WAN resource.
2. Under the "Hubs" section, click on your newly created hub.
3. In the hub's menu, select Virtual network connections.
4. Click + Add connection.
5. Fill in the connection details:
   • Connection name: A descriptive name for the connection.
   • Virtual networks: Select the virtual network you want to connect.
   • Propagate to none: Configure this based on your routing needs.
   • Enable internet transit: If you want to route internet traffic through this hub.
6. Click Create.

Example Azure CLI Command

You can also deploy and configure a hub using Azure CLI:

Next Steps

• Configure Site-to-Site VPN
• Configure ExpressRoute
• Deploy Azure Firewall in Virtual WAN