Document the temporary ExpressRoute transit path during a Virtual WAN migration

Treat staged-migration connectivity as its own acceptance case.

Resilient network core with engineered blue and gold data paths.
DSE visual intelligenceNetworks & infrastructureGuide · 2 min read
Executive summary

What you need to know

Treat staged-migration connectivity as its own acceptance case.

Potentially affected

Use this review only where the proposed migration follows that shared-circuit pattern. Identify the two hubs, their connections, the spokes moving in each stage and the application dependencies spanning them. The example is not proof that every coexistence topology has the same transit path.

DSE recommendation

DSE recommends documenting the temporary path separately from the intended final architecture.

Source facts

Microsoft’s staged Virtual WAN migration example connects both the original customer-managed hub and the new Virtual WAN hub to the same ExpressRoute circuit. In that example, traffic between spokes attached to the two environments traverses the circuit’s Microsoft enterprise-edge devices. The shared connection enables migration of spokes in stages. Microsoft Learn.

Applicability

Use this review only where the proposed migration follows that shared-circuit pattern. Identify the two hubs, their connections, the spokes moving in each stage and the application dependencies spanning them. The example is not proof that every coexistence topology has the same transit path.

DSE recommendation

DSE recommends documenting the temporary path separately from the intended final architecture. List dependencies that must cross between migrated and unmigrated spokes and agree their expected behavior with application owners. Preserve the old connection configuration and define a stage-specific recovery decision before moving a spoke. Review the complete current guidance for SKU, security and routing conditions.

Verification

During the authorized pilot stage, inspect effective routes and test representative communication in both directions across the coexistence boundary. Confirm the intended transit path and relevant security decisions. Retain the results for that stage, then repeat the dependency checks after the next move. Do not use final-state connectivity tests as a substitute for validating the temporary arrangement.

Official references

Microsoft Learn: Architecture: Migrate to Azure Virtual WAN.

Primary reference

Review the official source

Architecture: Migrate to Azure Virtual WAN | Microsoft Learn · Verified September 17, 2026

Open official reference ↗
Plan the next step

Need help applying this guidance safely?

DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.

Talk with DSE