trying to csummarisationreate a route-map for route

Question

trying to csummarisationreate a route-map for route

Alex Houghton (AP) 30

I am trying to create route maps to summarise BGP prefixes

so have created a new virtual network connection which has a BGP peer, so BGP is working as expected and can see all the routes the table on the SDWAN device (meraki)

I have created the route map, but when I save it comes up with failed to update route map: error a retriable exception occured

Harish Peddapally 1,590 Reputation points Microsoft External Staff Moderator

2025-09-10T08:12:14.19+00:00

Hi Alex Houghton (AP),

I hope Michele Ariis’s answer was helpful to you. If there's anything you're still unsure about, please feel free to let us know, we're happy to help further.

If the solution worked for you, don’t forget to "Accept the Answer" doing so helps others in the community who may have the same question.

Thanks!

Harish.

1 answer

Your answer

Harish Peddapally 1,590 Reputation points Microsoft External Staff Moderator

2025-09-10T08:12:14.19+00:00

Hi Alex Houghton (AP),

I hope Michele Ariis’s answer was helpful to you. If there's anything you're still unsure about, please feel free to let us know, we're happy to help further.

If the solution worked for you, don’t forget to "Accept the Answer" doing so helps others in the community who may have the same question.

Thanks!

Harish.

Answer 1

Michele Ariis 6,260 MVP

Hi, probable dual issue: (1) the "failed to update route map: a retriable exception occurred" error is almost always a blocked plan control/concurrent operation or invalid constraint; (2) in Virtual WAN, route maps don't perform true "summarization": you can filter/modify prefixes, but not generate an aggregate.

Quick fix, everything in one go: verify that the Hub is Standard and in the Succeeded state (not Updating), that the connection has only one route map per direction (inbound/outbound), no simultaneous updates (Routing Intent/Firewall), remove the association from the connection → save the route map → reassociate it; valid names (no spaces/strange chars), valid CIDR prefixes, rules < limits (e.g., <50). If the portal continues to fail, apply via CLI/ARM: create the route map and then az network vhub connection update --inbound-route-map <id>/--outbound-route-map <id>; if it still fails, delete and recreate the route map (often unlocks the state).

To "summarize" the prefixes to Meraki: either perform the aggregation on Meraki (recommended), or in vWAN, publish only the summary (add it as a static route in the relevant Hub route table) and use the route map to deny the more specific outbound routes to the site, so the peer only sees the aggregate; in inbound from the site, you can do the opposite (allow only the summary or deny the specific routes).

Alex Houghton (AP) 30 Reputation points

2025-09-10T09:43:36.83+00:00

thanks for the response will test the virtual network connection is using the routing intent which routes traffic to the Palo (Firewall) I have tried deleting the route map and recreating, have checked for no spaces still fails, meraki currently does not support aggregation, I need to summarize as there is a 4000 prefix limit on Azure vwan, and I will exceed this otherwise, dont want to use static routes as not scalable
Alex Houghton (AP) 30 Reputation points

2025-09-10T09:45:13.78+00:00

I dont have cli /arm currently only via GUI
Michele Ariis 6,260 Reputation points MVP

2025-09-10T10:55:51.12+00:00

vWAN route maps don’t do summarization, they can match/permit/deny/modify existing prefixes but cannot create an aggregate; with Meraki not aggregating and a ~4k prefix ceiling, you’ve got three workable paths: (1) Inject summaries as static routes in the vHub route table (Portal: Virtual WAN → Hubs → Route tables → your table → Add static route with the supernet) and use a route map (outbound) on the Meraki connection to deny the more-specifics, so the site only learns the aggregate; (2) place a small NVA aggregator (FRR/CSR/etc.) upstream of Meraki that does BGP aggregate-address and peer it to vWAN (via VPN/ER), then filter specifics with a route map—no CLI in Azure needed for this, you can build/associate via Portal; (3) change the SD-WAN side to support aggregation (when/if Meraki adds it). Your save error with “retriable exception” plus Routing Intent → Palo is common: the hub is in a locked/Updating state or the route-map attach conflicts with RI; fix in Portal by pausing concurrent changes, ensuring Hub = Succeeded, then disassociate the route map from the connection, Save, edit the map, Save, and re-associate (one map per direction); if it still fails under Routing Intent, attach the map on the branch (VPN/ER) connection that talks BGP to Meraki (not the VNet connection), or temporarily remove RI, apply the map, then re-enable RI; since you’re Portal-only, this is all doable from the UI; no ARM/CLI required; bottom line: aggregation in vWAN needs either static supernets + filter specifics or an NVA that aggregates—route maps alone can’t manufacture the summary.
Alex Houghton (AP) 30 Reputation points

2025-09-11T04:22:32.19+00:00

thanks so I think the option for me is to summarize on branch (spoke) mx (option 1), as we dont want to add a csr
Harish Peddapally 1,590 Reputation points Microsoft External Staff Moderator

2025-09-15T02:49:11.1+00:00

Hi Alex Houghton (AP),

I hope Michele Ariis’s answer was helpful to you. If there's anything you're still unsure about, please feel free to let us know, we're happy to help further.

If the solution worked for you, don’t forget to "Accept the Answer" doing so helps others in the community who may have the same question.

Thanks!

Harish.
Alex Houghton (AP) 30 Reputation points

2025-09-15T03:42:54.6933333+00:00

Thanks Harish, have been advised by cisco we need to deploy the CSR v8000, as currently doing a route summary on the meraki (static route) and enabling the vpn will not be added as IBGP which then added to EBGP back to azure (not supported) only subnets (vlans) under the autovpn are auto populated into ibgp and then to ebgp back to azure.

Share via

trying to csummarisationreate a route-map for route

1 answer

Your answer