Create the routes

Create a couple routes:

• A route from the hub gateway subnet to the spoke subnet through the firewall IP address
• A default route from the spoke subnet through the firewall IP address

1. From the Azure portal home page, select Create a resource.
2. In the search text box, type route table and press Enter.
3. Select Route table.
4. Select Create.
5. Select the FW-Hybrid-Test for the resource group.
6. For Region, select the same location that you used previously.
7. For the name, type UDR-Hub-Spoke.
8. Select Review + Create.
9. Select Create.
10. After the route table is created, select it to open the route table page.
11. Select Routes in the left column.
12. Select Add.
13. For the route name, type ToSpoke.
14. For the address prefix, type 10.6.0.0/16.
15. For next hop type, select Virtual appliance.
16. For next hop address, type the firewall's private IP address that you noted earlier.
17. Select OK.

Now associate the route to the subnet.

1. On the UDR-Hub-Spoke - Routes page, select Subnets.
2. Select Associate.
3. Under Virtual network, select VNet-hub.
4. Under Subnet, select GatewaySubnet.
5. Select OK.

Now create the default route from the spoke subnet.

1. From the Azure portal home page, select Create a resource.
2. In the search text box, type route table and press Enter.
3. Select Route table.
4. Select Create.
5. Select the FW-Hybrid-Test for the resource group.
6. For Region, select the same location that you used previously.
7. For the name, type UDR-DG.
8. For Propagate gateway route, select No.
9. Select Review + Create.
10. Select Create.
11. After the route table is created, select it to open the route table page.
12. Select Routes in the left column.
13. Select Add.
14. For the route name, type ToHub.
15. For the address prefix, type 0.0.0.0/0.
16. For next hop type, select Virtual appliance.
17. For next hop address, type the firewall's private IP address that you noted earlier.
18. Select OK.

Now associate the route to the subnet.

1. On the UDR-DG - Routes page, select Subnets.
2. Select Associate.
3. Under Virtual network, select VNet-spoke.
4. Under Subnet, select SN-Workload.
5. Select OK.