vwan route map not working as expected

Question

vwan route map not working as expected

Martin Kallukalam 460

My configuration (POC) is like this.
I have a VWAN with 2 VNETs
10.30.96.0/19
10.30.224.0/19

A P2S VPN with address pool 172.24.10.0/24

My Windows Laptop with Azure VPN client configured using downloaded hub vpn profile.

Standard everything as per Azure doc.
I have a route map with a rule as below and is attached to outbound P2S

User's image

Problem #1
I am expecting to see summary route 10.30.0.0/16 in route map dashboard. However it is showing individual VNET route
User's image

Problem #2
I downloaded a fresh vpn config from HUB . When I connect P2S Azure VPN client , I do not see summary routes, instead I see individual VNET routes.
User's image

Observation:
I do not think route map is functioning as expected or what else am I missing

Anonymous

2025-05-26T00:47:46.75+00:00

Hi @Martin Kallukalam

This thread seems to be a duplicate of https://learn.microsoft.com/en-us/answers/questions/2278665/vwan-route-map-not-working-when-multiple-route-rep

Therefore, we will work on the mentioned thread and close it as a duplicate.

Please let us know if you need any further assistance with this matter.
Martin Kallukalam 460 Reputation points

2025-05-26T02:28:07.2833333+00:00

@Anonymous It is not a duplicate. These are two different issues . I opened two different threads because they are entirely two different issues related to route map in VWAN Pls do not close the other thread. This thread is about route map not honoring multiple routes when comma seperated. The other thread is about route map not aggregating routes (summarizing routes ) and vpn clients (p2s) not receiving summary routes. Pls do not close this thread !!
Sindhuja Dasari 1,520 Reputation points Microsoft External Staff Moderator

2025-05-26T04:43:32.3533333+00:00
Hello Martin Kallukalam

I understand that you are trying to summarize the routes leaving from your VWAN.
The "Equals" criteria match only the mentioned routes only but not the underlying prefixes.

Please review the steps outlined below:

Create a Route-map to summarize the routes. The Route-map with a match rule for contains 10.30.0.0/16. The action Modify is selected. Route Modification has a Replace for the RoutePrefix 10.30.0.0/16.

Apply the Route-map on the connection. The Route-map will be applied in the outbound direction.

Verify that route 10.30.0.0/16 is being summarized in the route map dashboard.

Refer https://learn.microsoft.com/en-us/azure/virtual-wan/route-maps-how-to-summarize-routes-leaving-your-virtual-wan

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Martin Kallukalam 460 Reputation points

2025-05-26T18:34:50.5633333+00:00

@Sindhuja Dasari As you suggested I modified the route map as follow
match route prefix contains: 10.30.0.0/16 And in actions "replace with 10.30.0.0/16"

now route map dashboard shows correct summary route. But VPN client now shows all the individual routes and summary route : 10.30.96.0/19, 10.30.0.0/16 , 10.30.224.0/19 (see below attachment). this is not what is expected

If you have other ideas to try out , can you suggest exactly what I should include in match condition and action ?

Accepted answer

1 additional answer

Your answer

Anonymous

2025-05-26T00:47:46.75+00:00

Hi @Martin Kallukalam

This thread seems to be a duplicate of https://learn.microsoft.com/en-us/answers/questions/2278665/vwan-route-map-not-working-when-multiple-route-rep

Therefore, we will work on the mentioned thread and close it as a duplicate.

Please let us know if you need any further assistance with this matter.
Martin Kallukalam 460 Reputation points

2025-05-26T02:28:07.2833333+00:00

@Anonymous It is not a duplicate. These are two different issues . I opened two different threads because they are entirely two different issues related to route map in VWAN Pls do not close the other thread. This thread is about route map not honoring multiple routes when comma seperated. The other thread is about route map not aggregating routes (summarizing routes ) and vpn clients (p2s) not receiving summary routes. Pls do not close this thread !!
Sindhuja Dasari 1,520 Reputation points Microsoft External Staff Moderator

2025-05-26T04:43:32.3533333+00:00

Hello Martin Kallukalam

I understand that you are trying to summarize the routes leaving from your VWAN.
The "Equals" criteria match only the mentioned routes only but not the underlying prefixes.

Please review the steps outlined below:

Create a Route-map to summarize the routes. The Route-map with a match rule for contains 10.30.0.0/16. The action Modify is selected. Route Modification has a Replace for the RoutePrefix 10.30.0.0/16.

Apply the Route-map on the connection. The Route-map will be applied in the outbound direction.

Verify that route 10.30.0.0/16 is being summarized in the route map dashboard.

Refer https://learn.microsoft.com/en-us/azure/virtual-wan/route-maps-how-to-summarize-routes-leaving-your-virtual-wan

Please do consider to “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Martin Kallukalam 460 Reputation points

2025-05-26T18:34:50.5633333+00:00

@Sindhuja Dasari As you suggested I modified the route map as follow
match route prefix contains: 10.30.0.0/16 And in actions "replace with 10.30.0.0/16"

now route map dashboard shows correct summary route. But VPN client now shows all the individual routes and summary route : 10.30.96.0/19, 10.30.0.0/16 , 10.30.224.0/19 (see below attachment). this is not what is expected

If you have other ideas to try out , can you suggest exactly what I should include in match condition and action ?

Answer 1

Sindhuja Dasari 1,520 Microsoft External Staff Moderator

Hello Martin Kallukalam

Thank you for the update and additional details.

Based on your current route map dashboard, it appears you’re seeing only the summarized route as expected. The specific routes (10.30.96.0/19 and 10.30.224.0/19) should not be advertised to the VPN client, but it is reflecting the changes in VPN Client.

Steps we have tried in the lab environment:
Remove the existing rule that only performs a “replace” operation.

Create two separate rules,

Rule 1: Drop Specific Prefixes

Match condition: 10.30.96.0/19, 10.30.224.0/19 (If comma separation doesn't work, create two separate rules with action drop and next step continue)
Action: Drop
Next step: Continue

This rule ensures the individual /19 routes are not propagated to the VPN client.

Rule 2: Permit and Replace with Summarized Prefix

Match condition: Prefix contains 10.30.0.0/16
Action: Modify
Modification: Replace with 10.30.0.0/16
Next step: Terminate

Even after trying several rules, we observed that summarization only occurred at the route map dashboard level and not at the VPN site level.

We will reach out to the backend team regarding this feature issue.

Thank you for your time, Martin!

Please don’t forget to close the thread by clicking "Accept the answer" and "Yes" wherever the information provided helps you, as this can be beneficial to other community members.

Martin Kallukalam 460 Reputation points

2025-05-27T17:41:48.8066667+00:00

it summarizes the route in dashboard but not at the vpn client.
Martin Kallukalam 460 Reputation points

2025-05-27T23:53:18.89+00:00

@sindhuja Dasari
Thank you for trying to get to the bottom of this issue . Much appreciated your time and effort.
I am hoping you will be able to work with the backend support team and provide a solution to address why the summary routes are not pushed to the vpn clients even though the route dashboard shows the summary routes.
Sindhuja Dasari 1,520 Reputation points Microsoft External Staff Moderator

2025-05-28T09:26:25.8666667+00:00

Hello Martin Kallukalam
Thank you for your message.
Yes, I’ll continue working with the backend support team to investigate this further and identify why the summary routes are not being pushed to the VPN clients despite appearing correctly in the route dashboard.
I’ll keep you updated as soon as I have more information.

Answer 2

Hey there,

thanks for posting your question about the virtual wan route map not working as expected. I appreciate you taking the time to share this on the Microsoft Q&A portal )).

From what I understand, you're having trouble with route maps in azure virtual wan not behaving the way you intended. Let me try to break this down in a simple way while still keeping the technical details.

So, route maps in virtual wan are used to control how routes are propagated between different connections. The documentation explains this here: Virtual WAN routing intent and routing policies.

A common issue folks run into is that the route map rules might not be applied in the order you expect. The processing happens sequentially based on the priority you set. Maybe double check that your rules are ordered correctly? Also make sure the match conditions are properly configured - sometimes small typos in the community values or prefixes can cause the whole thing to not work as intended.

Another thing to look at is the propagation settings. The routes need to be properly propagated to the hub for the route maps to take effect. You can verify this in the virtual hub routing section under "propagated routes". Here's more info on that: Configure virtual hub routing.

If you could share more details about exactly what behavior you're seeing versus what you expected, that would help pinpoint the issue better. Like are certain routes missing entirely or just not taking the path you wanted? Also screenshots of your route map configuration would be super helpful if you can add those.

Don't worry if this seems confusing at first - routing in virtual wan can be tricky until you get the hang of it. We'll figure this out together )). Let me know if you need clarification on any of these points or if there's other aspects of the setup you'd like to discuss.

Thanks again for engaging with the community and posting your question! Looking forward to helping resolve this.

Best regards,
Alex
P.S. If my answer help to you, please Accept my answer
PPS That is my Answer and not a Comment
https://ctrlaltdel.blog/

Share via

vwan route map not working as expected

1 additional answer

Your answer