#1 Global Leader in Data Resilience

How to Use Veeam Data Cloud Vault with ExpressRoute with Private Peering

KB ID: 4745
Product: Veeam Backup & Replication | 12.3 | 12.3.1
Published: 2025-06-11
Last Modified: 2025-06-11
mailbox
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.

Cheers for trusting us with the spot in your mailbox!

Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest

error icon

Oops! Something went wrong.

Please, try again later.

Purpose

This article documents the usage of Veeam Data Cloud Vault within environments that use Azure ExpressRoute with private peering.

Solution

Software Prerequisites

  • Veeam Backup & Replication v12.3 or higher
  • Veeam Data Cloud Vault

Configuration Notes

  • This article covers customers using ExpressRoute with Private Peering.
    When using Express Route with Microsoft Peering, the steps below in this article do not need to be performed.
  • Using an Azure VM as the Veeam Gateway and Mount server, traffic for backup and restore operations will run within Azure.
    Note: Egress may be applicable depending on the destination of the restored data.

Requirements

Azure VPN / ExpressRoute

The procedure documented in this article requires an existing Azure ExpressRoute (with private peering) or VPN Connection (Site-to-Site or Point-to-Site-VPN).

Network Ports
  1. Create an Azure VM based on Veeam Proxy system requirements.
  2. Assign the VM a static IP address in Azure VM settings -> IP configuration.
Configure Static Private IP
  1. Within the local environment, create a DNS entry for the Azure VM created in the previous steps.
    This DNS entry will be used when adding the Azure VM to Veeam Backup & Replication, and allowing it to be assigned the Proxy and Gateway roles.
DNS Entry
  1. Using the FQDN DNS entry created, add the Azure VM as a managed Windows server within Veeam Backup & Replication.
  2. Assign that managed Windows as a General-Purpose Backup Proxy within Veeam Backup & Replication.
  3. Add the Veeam Data Cloud Vault repository, on the Account tab under Connection mode, click Choose... and select the Azure VM Veeam Proxy.
Assign Gateway
The data workflow will now be routed through the defined Veeam Proxy Gateway in the Azure environment.
Additional Recommended Configuration
The configuration of Service Endpoints is recommended when communicating with Azure Storage from within Azure.
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Spelling error in text

Thank you!

Thank you!

Your feedback has been received and will be reviewed.

Oops! Something went wrong.

Please, try again later.

You have selected too large block!

Please try select less.

KB Feedback/Suggestion

This form is only for KB Feedback/Suggestions, if you need help with the software open a support case

By submitting, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
Verify your email to continue your product download
We've sent a verification code to:
  • Incorrect verification code. Please try again.
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

error icon

Oops! Something went wrong.

Please, try again later.