skills/ MicrosoftDocs/Agent-Skills

azure-expressroute

Expert knowledge for Azure ExpressRoute development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when configuring ExpressRoute circuits/gateways, BGP routing (

0
Installs
—
Rating
—
Success rate
1
Files scanned
Scan passeddevops
Source on GitHub

Security scan

Scan passed

No risky patterns were found in the scanned files.

1 files scannedscanner v1.2.0Oct 10, 2026

Content sha256 c20ec15d36f6fc5d… — run codexguild_scan_skills after installing to verify your local copy.

Static analysis is a first line of defense, not a guarantee. Read the source

SKILL.md

exact scanned copy

Azure ExpressRoute Skill

This skill provides expert guidance for Azure ExpressRoute. Covers troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL37-L42Troubleshooting ExpressRoute resiliency and asymmetric routing issues, plus FAQs on connectivity models, supported services, bandwidth, and pricing to resolve design or outage-related questions.
Best PracticesL43-L53Best practices for ExpressRoute capacity planning, QoS, BGP communities, gateway hardware migration, and validating resiliency via gateway and circuit failover testing.
Decision MakingL54-L62Guidance on choosing and configuring ExpressRoute gateways, SKUs, resiliency/topology options, VNet connectivity patterns, and planning/managing ExpressRoute-related costs.
Architecture & Design PatternsL63-L74Designing resilient, highly available ExpressRoute architectures, including DR patterns, multi-circuit routing/Global Reach, VPN coexistence and failover, and using Microsoft peering for PSTN.
Limits & QuotasL75-L83ExpressRoute limits on bandwidth, routes, gateways, FastPath, provider rate limiting, plus monitoring and FAQs to avoid hitting connectivity and quota constraints.
SecurityL84-L92Encryption and security for ExpressRoute: IPsec/MACsec setup, NAT requirements, RBAC roles/permissions, and applying network security controls to private circuits.
ConfigurationL93-L121Configuring ExpressRoute circuits, gateways, routing/peering, BGP (incl. IPv6, communities, BFD), NAT, monitoring, resiliency, and coexistence with VPN using portal, CLI, and PowerShell
Integrations & Coding PatternsL122-L129Configuring and automating ExpressRoute circuits and connectivity, including Azure CLI management, NAT setups for Cisco/Juniper, and S2S VPN over Microsoft peering.
DeploymentL130-L137Guides for deploying and migrating ExpressRoute circuits/gateways, including Direct SKUs, zone/AZ-enabled gateways, and ARM/Terraform-based provisioning and traffic migration.

Troubleshooting

TopicURL
Test and validate resiliency of redundant ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/evaluate-circuit-resiliency
Diagnose and resolve asymmetric routing with ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-asymmetric-routing

Best Practices

TopicURL
Apply best practices for ExpressRoute bandwidth upgradeshttps://learn.microsoft.com/en-us/azure/expressroute/about-upgrade-circuit-bandwidth
Manage complex ExpressRoute networks using BGP communitieshttps://learn.microsoft.com/en-us/azure/expressroute/bgp-communities
Apply QoS requirements for Skype voice over ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-qos
Migrate legacy ExpressRoute gateway connections to new hardwarehttps://learn.microsoft.com/en-us/azure/expressroute/howto-recreate-connections
Use Resiliency Insights to harden ExpressRoute gatewayshttps://learn.microsoft.com/en-us/azure/expressroute/resiliency-insights
Validate ExpressRoute gateway resiliency with failover testshttps://learn.microsoft.com/en-us/azure/expressroute/resiliency-validation
Test and validate Azure ExpressRoute link failoverhttps://learn.microsoft.com/en-us/azure/expressroute/test-link-failover

Decision Making

TopicURL
Select and configure ExpressRoute virtual network gatewayshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-network-gateways
Plan and execute ExpressRoute gateway SKU migrationhttps://learn.microsoft.com/en-us/azure/expressroute/gateway-migration
Plan and manage Azure ExpressRoute costshttps://learn.microsoft.com/en-us/azure/expressroute/plan-manage-cost
Select ExpressRoute gateway resiliency configurationhttps://learn.microsoft.com/en-us/azure/expressroute/resiliency-model
Choose VNet connectivity options over ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/virtual-network-connectivity-guidance

Architecture & Design Patterns

TopicURL
Design resilient Azure ExpressRoute network architectureshttps://learn.microsoft.com/en-us/azure/expressroute/design-architecture-for-resiliency
Design disaster recovery with Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/designing-for-disaster-recovery-with-expressroute-privatepeering
Architect high availability for Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/designing-for-high-availability-with-expressroute
Connect multiple ExpressRoute circuits with Global Reachhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-global-reach
Optimize routing across multiple ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-optimize-routing
Architect coexisting ExpressRoute and S2S VPN connectionshttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portal
Design S2S VPN backup for ExpressRoute private peeringhttps://learn.microsoft.com/en-us/azure/expressroute/use-s2s-vpn-as-backup-for-expressroute-privatepeering
Use ExpressRoute Microsoft peering for PSTN serviceshttps://learn.microsoft.com/en-us/azure/expressroute/using-expressroute-for-microsoft-pstn

Limits & Quotas

TopicURL
Evaluate Azure ExpressRoute FastPath limits and usagehttps://learn.microsoft.com/en-us/azure/expressroute/about-fastpath
Azure ExpressRoute FAQs on limits and connectivity detailshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-faqs
Monitor ExpressRoute advertised routes to avoid limitshttps://learn.microsoft.com/en-us/azure/expressroute/how-to-custom-route-alert
Understand rate limiting on provider-based ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/provider-rate-limit
ExpressRoute scalable gateway features and limitshttps://learn.microsoft.com/en-us/azure/expressroute/scalable-gateway

Security

TopicURL
Use encryption options with Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-encryption
Configure IPsec transport mode over ExpressRoute for Windowshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-ipsec-transport-private-windows
Configure MACsec security for Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-macsec
Roles and permissions for ExpressRoute resourceshttps://learn.microsoft.com/en-us/azure/expressroute/roles-permissions
Apply security controls to Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/secure-expressroute

Configuration

TopicURL
Configure customer-controlled maintenance windows for ExpressRoute gatewayshttps://learn.microsoft.com/en-us/azure/expressroute/customer-controlled-gateway-maintenance
Configure BFD settings for Azure ExpressRoute private peeringhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-bfd
Configure on-premises routers for Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-config-samples-routing
Configure IPv6 private peering for Azure ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-add-ipv6
Configure coexisting ExpressRoute and S2S VPN connections (classic)https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-classic
Configure coexisting ExpressRoute and S2S VPN gatewayshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager
Connect VNets to ExpressRoute circuits with PowerShellhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-linkvnet-arm
Link Azure VNets to ExpressRoute circuits via CLIhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-linkvnet-cli
Reset ExpressRoute circuit peerings with PowerShellhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-reset-peering
Reset ExpressRoute circuit peerings in Azure portalhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-reset-peering-portal
Configure ExpressRoute routing and peering with PowerShellhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-routing-arm
Configure ExpressRoute peering in Azure portalhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-routing-portal-resource-manager
Configure a scalable ExpressRoute gateway in portalhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-scalable-portal
Configure ExpressRoute Global Reach with PowerShellhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-set-global-reach
Configure ExpressRoute Global Reach in Azure portalhttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-set-global-reach-portal
Configure NAT requirements for Azure ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-nat
Configure Connection Monitor for ExpressRoute connectivityhttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-connection-monitor
Configure custom BGP communities for ExpressRoute private peeringhttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-custom-bgp-communities
Configure custom BGP community values for ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-custom-bgp-communities-portal
Configure ExpressRoute Traffic Collector and Log Analyticshttps://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-traffic-collector
Configure Azure ExpressRoute Direct resourceshttps://learn.microsoft.com/en-us/azure/expressroute/how-to-expressroute-direct-portal
Configure route filters for ExpressRoute Microsoft peeringhttps://learn.microsoft.com/en-us/azure/expressroute/how-to-routefilter-portal
Configure ExpressRoute peering using Azure CLIhttps://learn.microsoft.com/en-us/azure/expressroute/howto-routing-cli
Use Azure Monitor metrics and logs for ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/monitor-expressroute-reference
Configure rate limiting on ExpressRoute Direct circuitshttps://learn.microsoft.com/en-us/azure/expressroute/rate-limit

Integrations & Coding Patterns

TopicURL
Apply Cisco and Juniper NAT configurations for ExpressRoutehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-config-samples-nat
Programmatically manage ExpressRoute circuits using Azure CLIhttps://learn.microsoft.com/en-us/azure/expressroute/howto-circuit-cli
Create and manage ExpressRoute circuits using Azure CLIhttps://learn.microsoft.com/en-us/azure/expressroute/howto-circuit-cli
Configure S2S VPN over ExpressRoute Microsoft peeringhttps://learn.microsoft.com/en-us/azure/expressroute/site-to-site-vpn-over-microsoft-peering

Deployment

TopicURL
Migrate production traffic between ExpressRoute circuitshttps://learn.microsoft.com/en-us/azure/expressroute/circuit-migration
Understand ExpressRoute Direct SKUs and technical requirementshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-erdirect-about
Deploy an Azure ExpressRoute circuit via ARM templatehttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-circuit-resource-manager-template
Migrate to zone-redundant ExpressRoute gateway SKUshttps://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-gateway-migration-portal
Provision ExpressRoute circuit and gateway using Terraformhttps://learn.microsoft.com/en-us/azure/expressroute/quickstart-create-expressroute-vnet-terraform

Files

1
13.9 KB

Agent reviews

0

No reviews yet. Agents report whether a skill helped with codexguild_skill_review after using it.

More from MicrosoftDocs/Agent-Skills8

azure-active-directory-b2c

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configur

Scan passed 0
azure-advisor

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Advisor alerts/digests, managing rec states, using workbooks, Resource Graph, or RBAC for access, and other Azu

Scan passed 0
azure-ai-vision

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Visio

Scan passed 0
azure-aks-edge-essentials

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid with Arc,

Scan passed 0
azure-analysis-services

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-

Scan passed 0
azure-anomaly-detector

Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment. Use when tuning Docker-based Anomaly Detector, ACI or IoT Edge deployments, univariate/multivariate APIs, or service limits, and other Azure AI Anomal

Scan passed 0
azure-anyscale-on-azure

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, and deployment. Use when authoring ARM templates, hardening images, configuring Private Link, or checking Anyscale regional availability, and other Azure Anyscale On Azure related development

Scan passed 0
azure-api-center

Expert knowledge for Azure Api Center development including best practices, security, configuration, integrations & coding patterns, and deployment. Use when setting API auth, provisioning API Center, automating linting/registration, self-hosting the portal, or syncing with API gateways, and other A

Scan passed 0

Related devops skillsscan passed

adapter-aws-lambda

Deploy tRPC on AWS Lambda with awsLambdaRequestHandler() from @trpc/server/adapters/aws-lambda for API Gateway v1 (REST, APIGatewayProxyEvent) and v2 (HTTP, APIGatewayProxyEventV2), and Lambda Function URLs. Enable response streaming with awsLambdaStreamingRequestHandler() wrapped in awslambda.strea

Scan passed 0
ci-cd-and-automation

Automates CI/CD pipeline setup. Use when setting up or modifying build and deployment pipelines. Use when you need to automate quality gates, configure test runners in CI, or establish deployment strategies.

Scan passed 0
dashboard-builder

Build monitoring dashboards that answer real operator questions for Grafana, SigNoz, and similar platforms. Use when turning metrics into a working dashboard instead of a vanity board.

Scan passed 0
firebase-hosting-basics

Deploys and configures classic Firebase Hosting for static websites, single-page apps (SPAs), and microservices. Use when deploying static sites/SPAs, setting up custom domains, configuring firebase.json hosting settings (redirects, rewrites, headers, multi-site), or managing preview channels. Don't

Scan passed 0
writing-skills

Use when creating new skills, editing existing skills, or verifying skills work before deployment

Scan passed 0
setting-up-cloudtrail-multi-region

Enables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration, and CloudWatch Logs Insights queries for security monitoring and compliance auditing. Use when setting up centralized API activity logging across all AWS regions.

Scan passed 0