Azure VPN Topology with multi-VRF and BGP

[rasmusan1]

Hello

I am looking into extending 2 VLAN separated in 2 VRF's on premise, to Azure using VTI based IKEv2 VPN with 2 routers (Cisco ISR), each connected to different ISP.

please refer to attached drawing...

I am unsure if this is possible - could someone please help on thoughts on this design ?

thanks.

[Georg Pauwen]

Hello,

I might be off here, but your design looks similar to Azure Stack with multiple clients...

https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-connect-expressroute?view=azs-1910

[rasmusan1]

hmn yes could like a bit like it... but this is like much smaller scale and just the same customer, wanting to connect their on-premise environment to Azure, while still maintaining the same separation between their 2 VRFs.

And they want to use 2 different ISP's (Internet), each connected to a separate router, and then establish VPN tunnels to the 2 separate VNETs/VPN Gateways in Azure with BGP failover...

Anyone tried a similar scenario?

They have ISR 4300 series routers