Symptom:  "When I select the Vnet and then the subnet it uses the .4 IP , which is already allocated to another device. The .4 address is the next available IP within the CIDR, but it is not available for use.  Is it possible to change that IP to something else on the same subnet and vNet ?"   Workaround:  There are few workarounds to tackle this issue.   When you deploy a CSR through portal and reach on summary page then after validation you will see “download template and parameters” tab at the bottom of screen. Click on this tab and you will be presented with a template in json format. Download this template by clicking on "Download Template" button. It will download template in zip format. You need to unzip and update a file template.json using any json editor. Modify following 2 lines in template.json: "privateIPAddress": "[parameters('subnet1StartAddress')]" "privateIPAddress": "[parameters('subnet2StartAddress')]"    Change this to "privateIPAddress": "[parameters('<your desired private IPaddress>')]".  After making these changes do not forget to run json validation to make sure contents of this file are valid.   After you update the template, go to Azure Portal. Click on (left side column) NEW-->Template Deployment-->Create. Here in Template Deployment windows you need to copy and paste the template.json file. Now, UI will ask you the parameters to enter. At this point, you can  from parameters.json file.     You can use azure CLI or poweshell commands to create CSR. I can provide you sample CLI configuration to deploy the CSR.  Cisco is working on fixing this issue and will be updating the CSR deployment templates soon.... ... View more

Cisco CSR1000V, where it's used and how does it perform T he Cisco CSR1000V can deliver up to 20Gbps of throughput on a single x86 commercially available server, delivers up to 5Gbps of encrypted traffic inside public cloud providers, and with its rich IOS-XE feature set a Cisco secured routing fabric can be extended across campus, DC, branch and public cloud platforms that cover dispersed geographical locations. See our independent performance test report by Miercom. In the report, you will find we can achieve 20Gbps of throughput on a single x86 server by running 3 separate 2vCPU CSRs and routing traffic across them, note the 3 CSRs were running as separate routing instance (not clustered) rather than clustered. You can cluster CSR1000Vs for specific services, for example IPSEC VPN concentrator. The Cisco CSR1000V also provides the highest throughput capability of encrypted traffic inside Amazon AWS cloud services . With CSRs throughput capability inside public cloud we can deliver on business-oriented solutions that help deliver secure, reliable and scalable hosted application services. One example of a business-oriented solution is our “Cisco Transit VPC” inside Amazon AWS. The solution addresses a known transit routing limitation in AWS that limits the scaling up of VPC ’s. Using the CSR1000V, in conjunction with AWS automation tool, a user is able to create a dedicated VPC running dedicated high throughput CSRs, clustered in HA mode, and provide interconnection between VPCs that need to route between each other, secure VPCs that should be isolated, and provide secure connectivity to on-prem locations. For more detailed information on Transit VPC go here . The Cisco CSR1000V follows the same architecture of its hardware predecessor Cisco ASR 1000. The virtual appliance consists of separate control plane and separate data plane processing roles. If the CSR VM is defined as a 1vCPU VM, then the 1vCPU is shared between control plane and data plane. As more cores are added to the CSR VM the extra cores are allocated to the data plane in order to accelerate the processing and forwarding of packets. For example, on a 4vCPU VM a CSR would allocate 1 core to control plane functions and 3 cores to data plane functions, in an 8vCPU VM it would be 1 control plane core and 7 data plane core. The core allocation model suits most network use cases where the important service is bandwidth. The control plane is simply handling a few hundred or low thousand routes, network policies and low to medium connection rates. For services that rely on control plane processing, for example vRoute Reflector where millions of routes are stored and processed, vIWAN Master Controller Hub managing up to 2000 PfR border routers or IPSEC VPN Concentrator maintaining state of thousands of IPSEC tunnel sessions, the CSR delivers the ability to dynamically assign an extra core of the data plane to the control plane. This allows for an 8vCPU CSR to allocate 2 cores to the control plane and 6 cores to the data plane in order to help scale the control plane capabilities. The CSR1000V has come a long way since its launch almost 5 years ago, and we improve the feature set as well as performance on each release. The CSR1000V carries the same feature set as the Cisco ASR 1000 series and the Cisco ISR 4000 series, so it can meet almost every networking requirements across different points in the network. It provides flexible throughput options that range between 10Mbps thru 10Gbps, and is supported on RHEL KVM , Ubuntu KVM, VMware ESXi, Microsoft Hyper-V, Citrix XEN hypervisors as well as Microsoft Azure and Amazon AWS cloud provider platforms. You can obtain a CSR1000V directly from www.cisco.com and obtain 60-day trial licenses, or launch it directly from Amazon AWS or Microsoft Azure and run CSR on these cloud platform within trial period limits. If you'd like to know more, please register for our upcoming Enterprise Networks Customer Connection Program on March 21 from 8:00-9:30am PT on the topic of t he Cisco Cloud Services Router next generation forwarding plane. (Registration for the Enterprise Network Customer Connection Program is required.  Registration is quick and easy to complete) The Cloud Services Router is used across all different points within a network. From a feature perspective, it delivers on the promise of rich “enterprise-class” networking services and from a performance perspective it can achieve throughput of 10Gbps. But, datacenter edge and public cloud edge use cases demand throughput capabilities that are above 10Gbps with services enabled. Learn how Cisco engineering is re-architecting and enhancing the Cloud Services Router dataplane to achieve “40Gbps” of throughput. ... View more

  Microsoft Azure Government Cloud is an isolated and dedicated cloud platform, which enables government agencies and government approved contractors to host sensitive data. Connectivity from on-premises locations to Azure Government Cloud must be secure, scalable and dynamic. With Cisco CSR1000v now available on Azure Government Cloud, Government Cloud customers can enjoy the same advanced routing and security benefits delivered on Azure public cloud. Cisco CSR1000v provides best in class routing capabilities that support full path encryption with the strongest cipher suites available in the market, L4-L7 firewall capabilities and L7 visibility and control. Using Cisco CSR1000v in concert with the Azure Government Cloud delivers on the value proposition of ensuring Government data receives the protection of Cisco’s security capabilities in the Azure cloud environment they trust. Because Cisco CSR1000V runs full featured Cisco IOS-XE, management of CSR1000V simply becomes another location inside an already deployed Cisco based network and plugs in easily to existing management tools and operations. See below for some FAQs. To launch the CSR 1000V on Azure Government Cloud there is a pre-built solution available to you.  The solution is based on templates we created to ease the deployment of the CSR 1000V on Azure.  The templates allow the solution to deploy different resources at the same time to fully support a CSR 1000V deployment.  The solution details are as follows: 2 or 4 Network-Interface-Cards (NICs) VNet configured with two or four subnets, one private or three private and one public Routing tables on each subnet, with user-defined routes, the private subnet will use private-facing interface as the gateway so the VMs behind the router will not have direct access to the internet Enables IP forwarding for each interface Adds UDP port 500 (ISKAMP) and 4500 (NAT-T) in the security group on the public subnet for VPN connections Azure D2 or D3 instance type compute How to Deploy Cisco CSR in Azure Government Go to the solution templates for 2-NIC and 4-NIC Cisco CSR1000v in Azure QuickStart Repo on Github , found at the links below. They can be found by searching for Cisco CSR1000v, or clicking below. They can be found by searching for Cisco CSR1000v, or clicking below. For step by step deployment instructions for solution templates from Github in to Azure Government Cloud, see our technical documentation . Cisco CSR1000v (2 NIC) Cisco CSR1000v 4 NIC NOTE: you will need an Azure Government Account valid in order to continue. To experience the power of Azure Government for your organization, sign up for an Azure Government Trial . When deploying the CSR 1000V solution on Azure D2 compute specifications are 2 vCPU and 7GB of RAM. With these specifications the CSR 1000V can achieve a CEF throughput of 500Mbps and an IPSec throughput (AES 256) of 150 Mbps. When deploying the CSR 1000V solution on Azure D3 compute specifications are 4 vCPU and 14GB of RAM. With these specifications the CSR 1000V can achieve a CEF throughput of 500Mbps and an IPSec throughput (AES 256) of 500 Mbps. Both offers support up to 1,000 VPN tunnels. How Does Licensing the CSR 1000V Work on Azure Government Cloud? If you want to connect your enterprise network to Azure the CSR 1000V supports Bring Your Own License (BYOL).  This means you buy a license from Cisco or a partner and install that license to the CSR 1000V running on Azure Government Cloud. Find your local Cisco partner here: https://locatr.cloudapps.cisco.com/WWChannels/LOCATR/openBasicSearch.do To experience the power of Azure Government for your organization, sign up for an Azure Government Trial . If you want to give the CSR 1000V a try on Azure, Cisco offers 60-day demo licenses to all CCO account holders.  If you don’t have an account, you go to this link , and create a guest account.  Once you have a guest account, follow the instructions here for temporarily licensing you CSR 1000V on Azure. You can access this whitepaper to learn more about the integration of Cisco CSR 1000V with Microsoft Azure. To launch the CSR 1000V for Microsoft Azure, please visit the Azure Government Marketplace and search for Cisco CSR 1000V. We welcome your comments and suggestions to help us continually improve your Azure Government experience. To stay up to date on all things Azure Government, be sure to subscribe to our RSS feed and to receive emails, click "Subscribe by Email!" on the Azure Government Blog . To experience the power of Azure Government for your organization, sign up for an Azure Government Trial . ... View more