> ## Documentation Index
> Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connect Virtual Network to an ExpressRoute Circuit

> Guide to connecting an Azure Virtual Network to an ExpressRoute circuit via the portal, including prerequisites, configuration steps, validation, and troubleshooting.

This guide walks through connecting an Azure Virtual Network (VNet) to an ExpressRoute circuit using the Azure portal. Follow these steps to provision a private, high-bandwidth connection between your on-premises network and Azure VNets.

## Prerequisites

* An existing ExpressRoute circuit.
* A Virtual Network with an associated virtual network gateway configured for ExpressRoute (not a VPN gateway).
* Appropriate permissions in the subscription or access to an authorization key if the circuit is in another subscription.

## Steps: Create the ExpressRoute Connection

1. Open the ExpressRoute circuit you want to use in the Azure portal.
2. In the left-hand menu, choose **Connections**, then click **Add** at the top of the page to create a new connection.

When you click **Add**, the Create connection blade opens. Because you started from a specific ExpressRoute circuit, several fields are pre-populated:

* Subscription, resource group, and region.
* Connection type set in context of this circuit.

On the Basics blade you only need to enter a display name for the connection.

<Frame>
  <img src="https://mintcdn.com/kodekloud-c4ac6d9a/OMkQqgpN2jgRj5WR/images/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/Configure-Peering-for-an-ExpressRoute-Deployment/Connect-Virtual-Network-to-an-ExpressRoute-Circuit/expressroute-network-connection-configuration-screens.jpg?fit=max&auto=format&n=OMkQqgpN2jgRj5WR&q=85&s=fd3b7be90eed26269e6bd41be02c5e78" alt="The image shows two interface screens for creating a network connection using ExpressRoute, detailing the configuration steps under &#x22;Basics&#x22; and &#x22;Settings&#x22; tabs. The screens include options for selecting subscription details, instance details, and virtual network gateway settings." width="1920" height="1080" data-path="images/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/Configure-Peering-for-an-ExpressRoute-Deployment/Connect-Virtual-Network-to-an-ExpressRoute-Circuit/expressroute-network-connection-configuration-screens.jpg" />
</Frame>

### Settings blade — what to configure

On the Settings blade, pick the virtual network gateway that corresponds to the VNet you want to attach. Important details:

* Gateway type must be configured for ExpressRoute (you cannot select a VPN gateway).
* Selecting the correct gateway binds the ExpressRoute circuit to that VNet.

Use the table below to quickly validate each option on the Settings blade.

| Field                   | Purpose                                                          | Example / Notes                                                |
| ----------------------- | ---------------------------------------------------------------- | -------------------------------------------------------------- |
| Virtual network gateway | Associates the VNet gateway with the ExpressRoute circuit        | Must be an ExpressRoute-enabled gateway                        |
| ExpressRoute Circuit    | The circuit you are working in                                   | Auto-populates when you create the connection from the circuit |
| Redeem authorization    | Use when the ExpressRoute circuit is in a different subscription | You must redeem the authorization key from the circuit owner   |
| Routing weight          | Influence route preference when multiple paths exist             | Higher value increases path preference                         |

After configuring these values, click **Review + create** to validate, then **Create** to provision the connection.

## Provisioning and validation

Azure will provision the connection. After deployment completes, return to the Connections page for the ExpressRoute circuit. The new connection should appear in the list.

You should see:

* Status: `Succeeded`
* Type: `ExpressRoute`
* Peers: the name of the virtual network gateway linked to the circuit

<Frame>
  <img src="https://mintcdn.com/kodekloud-c4ac6d9a/OMkQqgpN2jgRj5WR/images/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/Configure-Peering-for-an-ExpressRoute-Deployment/Connect-Virtual-Network-to-an-ExpressRoute-Circuit/azure-portal-expressroute-circuit-success.jpg?fit=max&auto=format&n=OMkQqgpN2jgRj5WR&q=85&s=7719be9e466d93737249a55e62982f7d" alt="The image shows an Azure portal interface displaying ExpressRoute circuit connections, with the connection named &#x22;ER-VNet-Connection&#x22; marked as succeeded under the &#x22;ExpressRoute&#x22; type." width="1920" height="1080" data-path="images/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/Configure-Peering-for-an-ExpressRoute-Deployment/Connect-Virtual-Network-to-an-ExpressRoute-Circuit/azure-portal-expressroute-circuit-success.jpg" />
</Frame>

## Post-connection verification

* Validate BGP peering and route propagation between your on-premises routers and Azure.
* Confirm that the on-premises network can reach intended Azure subnets.
* Verify effective routes on the VNet and on the virtual machines’ NICs if needed.

## Common issues and troubleshooting

* Connection stuck in provisioning: check gateway SKU and gateway status.
* Cross-subscription connections fail: ensure authorization key has been redeemed by the connecting subscription.
* Routes not learned: verify BGP is established and routing weight / filters are configured correctly.

<Callout icon="warning" color="#FF6B6B">
  Ensure the virtual network gateway SKU supports ExpressRoute connectivity. You cannot connect a VNet using a VPN-only gateway — the gateway must be configured for ExpressRoute. If the circuit is in another subscription, make sure the authorization key is redeemed before creating the connection.
</Callout>

<Callout icon="lightbulb" color="#1CB2FE">
  After the connection is created, validate routing and peering (BGP) to ensure traffic flows as expected. For details on gateway SKUs and ExpressRoute requirements, see the [Azure ExpressRoute documentation](https://learn.microsoft.com/azure/expressroute/).
</Callout>

This completes the connection process for linking an Azure VNet to an ExpressRoute circuit.

<CardGroup>
  <Card title="Watch Video" icon="video" cta="Learn more" href="https://learn.kodekloud.com/user/courses/az-700-designing-and-implementing-microsoft-azure-networking-solutions/module/3b13bf2e-ae4b-48f8-bc30-43e676e68d98/lesson/1fa42de7-0de1-4b62-88bf-7ff51f09a8e8" />
</CardGroup>
