Lumen help

Creating a connection from your location to Microsoft Azure Gov

You can create a Dynamic Connection from your location to Microsoft Azure Gov. To create the connection, you'll need an ExpressRoute service key from Microsoft. Be sure to have that information handy to type in (or copy/paste). Microsoft Azure Gov requires two EVCs to make the connection (which Control Center will create when you build the connection). You'll only be billed for one; the other is for redundancy.

Azure Gov also requires Q-in-Q style tagging (known as double-stacked tags or 802.1ad) at the NNI. This provides layer-2 flexibility by allowing multiple VLAN tags to be inserted into a single frame. Inner VLAN tags (C-Tags) that identify your traffic are inserted inside of the outer VLAN tags (S-Tags) provided by the service provider. The S-Tag becomes a single VLAN that carries multiple VLANs within it. A single VXC carries the bundled VLAN tags between the two network endpoints.


For Dynamic Connections to Microsoft Azure, your equipment must support 802.1ad (Q-in-Q). We recommend configuring your router for Q-in-Q before creating your Dynamic Connection in Control Center. Q-in-Q can be difficult to set up. Use the example below to help you set up Q-in-Q.

Here’s an example below with a Cisco router.

You’ll assign the outer tag in Control Center and the inner tag in the Azure portal (peering VLAN).

‘Primary EVC VLAN – 100 - Control Center
‘Secondary EVC VLAN – 200 - Control Center
‘Private Peering – VLAN 300 - Azure portal
‘MSFT Peering – VLAN 400 - Azure portal

interface GigabitEthernet0/1.100300

  encapsulation dot1Q 100 second-dot1q 300 ‘Azure Private primary peer
  description "Cloud Connect"
  ip address

interface GigabitEthernet0/1.200300

  encapsulation dot1Q 200 second-dot1q 300
‘Azure Private secondary peer
  description "Cloud Connect"
  ip address

interface GigabitEthernet0/1.100400
  encapsulation dot1Q 100 second-dot1q 400
‘MSFT primary peer
  description "Cloud Connect"
  ip address

interface GigabitEthernet0/1.200400
  encapsulation dot1Q 200 second-dot1q 400
‘MSFT secondary peer
  description "Cloud Connect"
  ip address

To create a connection from your location to Microsoft Azure Gov:

Dynamic Connections (showing list view)
Dynamic Connections (Create Connection)
  1. In the From Connection Type field, select My Location(s).
  1. In the To Connection Type field, select Microsoft (Azure Gov).
Dynamic Connections (My Location to Microsoft Azure Gov--select endpoints)
  1. Click Next.
  1. Review your connection information, then click the I agree with the terms and conditions checkbox. (To enable the checkbox, scroll to the bottom of the terms and conditions.)
  1. Click Create Connection.

    Control Center creates the request for the connection. From here, you can either view the status of your request (click the list link) or close the window (click Close) to do something else in Control Center.