Skip to content
cccskills
FreePublished on GitHub

azure-expressroute

Expert knowledge for Azure ExpressRoute development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when planning ExpressRoute bandwidth/gateways, configuring BGP/NAT, deploying circuits via ARM/Terraform, or automating CLI-based management, and other Azure ExpressRoute related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual WAN (use azure-virtual-wan), Azure VPN Gateway (use azure-vpn-gateway), Azure Internet Peering (use azure-internet-peering).

The English summary is being prepared. Showing the original description.

Works withAzureTerraform
See how to install

Files included (1)

  • SKILL.md14.1 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Azure ExpressRoute Skill

This skill provides expert guidance for Azure ExpressRoute. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL37-L42Troubleshooting ExpressRoute resiliency and asymmetric routing issues, plus FAQs on connectivity models, supported services, bandwidth, and pricing to resolve design or outage-related questions.
Best PracticesL43-L53Best practices for ExpressRoute capacity planning, QoS, BGP communities, gateway hardware migration, and validating resiliency via gateway and circuit failover testing.
Decision MakingL54-L62Guidance on choosing and configuring ExpressRoute gateways, SKUs, resiliency/topology options, VNet connectivity patterns, and planning/managing ExpressRoute-related costs.
Architecture & Design PatternsL63-L74Designing resilient, highly available ExpressRoute architectures, including DR patterns, multi-circuit routing/Global Reach, VPN coexistence and failover, and using Microsoft peering for PSTN.
Limits & QuotasL75-L84ExpressRoute bandwidth, route, and gateway limits; FastPath usage; provider rate limiting; monitoring advertised routes; and FAQs on staying within connectivity quotas.
SecurityL85-L93Encryption and security for ExpressRoute: IPsec/MACsec setup, NAT requirements, RBAC roles/permissions, and applying network security controls to private circuits.
ConfigurationL94-L122Configuring ExpressRoute circuits, gateways, routing/peering, BGP (incl. IPv6, communities, BFD), NAT, monitoring, resiliency, and coexistence with VPN using portal, CLI, and PowerShell
Integrations & Coding PatternsL123-L130Configuring and automating ExpressRoute circuits and connectivity, including Azure CLI management, NAT setups for Cisco/Juniper, and S2S VPN over Microsoft peering.
DeploymentL131-L138Guides for deploying and migrating ExpressRoute circuits/gateways, including Direct SKUs, zone/AZ-enabled gateways, and ARM/Terraform-based provisioning and traffic migration.

Troubleshooting

TopicURL
Test and validate resiliency of redundant ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/evaluate-circuit-resiliency
Diagnose and resolve asymmetric routing with ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-asymmetric-routing

Best Practices

TopicURL
Apply best practices for ExpressRoute bandwidth upgradeshttps://learn.microsoft.com/en-us/azure/expressroute/about-upgrade-circuit-bandwidth
Manage complex ExpressRoute networks using BGP communitieshttps://learn.microsoft.com/en-us/azure/expressroute/bgp-communities
Apply QoS requirements for Skype voice over ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-qos
Migrate legacy ExpressRoute gateway connections to new hardwarehttps://learn.microsoft.com/en-us/azure/expressroute/howto-recreate-connections
Use Resiliency Insights to harden ExpressRoute gatewayshttps://learn.microsoft.com/en-us/azure/expressroute/resiliency-insights
Validate ExpressRoute gateway resiliency with failover testshttps://learn.microsoft.com/en-us/azure/expressroute/resiliency-validation
Test and validate Azure ExpressRoute link failoverhttps://learn.microsoft.com/en-us/azure/expressroute/test-link-failover

Decision Making

TopicURL
Select and configure ExpressRoute virtual network gatewayshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-network-gateways
Plan and execute ExpressRoute gateway SKU migrationhttps://learn.microsoft.com/en-us/azure/expressroute/gateway-migration
Plan and manage Azure ExpressRoute costshttps://learn.microsoft.com/en-us/azure/expressroute/plan-manage-cost
Select ExpressRoute gateway resiliency configurationhttps://learn.microsoft.com/en-us/azure/expressroute/resiliency-model
Choose VNet connectivity options over ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/virtual-network-connectivity-guidance

Architecture & Design Patterns

TopicURL
Design resilient Azure ExpressRoute network architectureshttps://learn.microsoft.com/en-us/azure/expressroute/design-architecture-for-resiliency
Design disaster recovery with Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/designing-for-disaster-recovery-with-expressroute-privatepeering
Architect high availability for Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/designing-for-high-availability-with-expressroute
Connect multiple ExpressRoute circuits with Global Reachhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-global-reach
Optimize routing across multiple ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-optimize-routing
Architect coexisting ExpressRoute and S2S VPN connectionshttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portal
Design S2S VPN backup for ExpressRoute private peeringhttps://learn.microsoft.com/en-us/azure/expressroute/use-s2s-vpn-as-backup-for-expressroute-privatepeering
Use ExpressRoute Microsoft peering for PSTN serviceshttps://learn.microsoft.com/en-us/azure/expressroute/using-expressroute-for-microsoft-pstn

Limits & Quotas

TopicURL
Evaluate Azure ExpressRoute FastPath limits and usagehttps://learn.microsoft.com/en-us/azure/expressroute/about-fastpath
Manage ExpressRoute advertised route scale within limitshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-connection-manage-advertised-routes
Azure ExpressRoute FAQs on limits and connectivity detailshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-faqs
Monitor ExpressRoute advertised routes to avoid limitshttps://learn.microsoft.com/en-us/azure/expressroute/how-to-custom-route-alert
Understand rate limiting on provider-based ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/provider-rate-limit
ExpressRoute scalable gateway features and limitshttps://learn.microsoft.com/en-us/azure/expressroute/scalable-gateway

Security

TopicURL
Use encryption options with Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-encryption
Configure IPsec transport mode over ExpressRoute for Windowshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-ipsec-transport-private-windows
Configure MACsec security for Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-macsec
Roles and permissions for ExpressRoute resourceshttps://learn.microsoft.com/en-us/azure/expressroute/roles-permissions
Apply security controls to Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/secure-expressroute

Configuration

TopicURL
Configure customer-controlled maintenance windows for ExpressRoute gatewayshttps://learn.microsoft.com/en-us/azure/expressroute/customer-controlled-gateway-maintenance
Configure BFD settings for Azure ExpressRoute private peeringhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-bfd
Configure on-premises routers for Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-config-samples-routing
Configure IPv6 private peering for Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-add-ipv6
Configure coexisting ExpressRoute and S2S VPN connections (classic)https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-classic
Configure coexisting ExpressRoute and S2S VPN gatewayshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager
Connect VNets to ExpressRoute circuits with PowerShellhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-linkvnet-arm
Link Azure VNets to ExpressRoute circuits via CLIhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-linkvnet-cli
Reset ExpressRoute circuit peerings with PowerShellhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-reset-peering
Reset ExpressRoute circuit peerings in Azure portalhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-reset-peering-portal
Configure ExpressRoute routing and peering with PowerShellhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-routing-arm
Configure ExpressRoute peering in Azure portalhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-routing-portal-resource-manager
Configure a scalable ExpressRoute gateway in portalhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-scalable-portal
Configure ExpressRoute Global Reach with PowerShellhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-set-global-reach
Configure ExpressRoute Global Reach in Azure portalhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-set-global-reach-portal
Configure NAT requirements for Azure ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-nat
Configure Connection Monitor for ExpressRoute connectivityhttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-connection-monitor
Configure custom BGP communities for ExpressRoute private peeringhttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-custom-bgp-communities
Configure custom BGP community values for ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-custom-bgp-communities-portal
Configure ExpressRoute Traffic Collector and Log Analyticshttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-traffic-collector
Configure Azure ExpressRoute Direct resourceshttps://learn.microsoft.com/en-us/azure/expressroute/how-to-expressroute-direct-portal
Configure route filters for ExpressRoute Microsoft peeringhttps://learn.microsoft.com/en-us/azure/expressroute/how-to-routefilter-portal
Configure ExpressRoute peering using Azure CLIhttps://learn.microsoft.com/en-us/azure/expressroute/howto-routing-cli
Use Azure Monitor metrics and logs for ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/monitor-expressroute-reference
Configure rate limiting on ExpressRoute Direct circuitshttps://learn.microsoft.com/en-us/azure/expressroute/rate-limit

Integrations & Coding Patterns

TopicURL
Apply Cisco and Juniper NAT configurations for ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-config-samples-nat
Programmatically manage ExpressRoute circuits using Azure CLIhttps://learn.microsoft.com/en-us/azure/expressroute/howto-circuit-cli
Create and manage ExpressRoute circuits using Azure CLIhttps://learn.microsoft.com/en-us/azure/expressroute/howto-circuit-cli
Configure S2S VPN over ExpressRoute Microsoft peeringhttps://learn.microsoft.com/en-us/azure/expressroute/site-to-site-vpn-over-microsoft-peering

Deployment

TopicURL
Migrate production traffic between ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/circuit-migration
Understand ExpressRoute Direct SKUs and technical requirementshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-erdirect-about
Deploy an Azure ExpressRoute circuit via ARM templatehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-resource-manager-template
Migrate to zone-redundant ExpressRoute gateway SKUshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-gateway-migration-portal
Provision ExpressRoute circuit and gateway using Terraformhttps://learn.microsoft.com/en-us/azure/expressroute/quickstart-create-expressroute-vnet-terraform

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing Advisor alerts, digests, recommendation states, Resource Graph queries, or RBAC access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local, GitOps, IoT/OPC/ONVIF, or Key Vault-integrated workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when registering AKS as Anyscale clouds, wiring ACR images, enabling Private Link/RBAC, ARM-based deployments, or region checks, and other Azure Anyscale On Azure related development tasks. Not for Azure Databricks (use azure-databricks), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Machine Learning (use azure-machine-learning), Azure HDInsight (use azure-hdinsight).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 19, 2026

See all skills by MicrosoftDocs

Report a problem with this skill