The add command throws an error when used on an existing created virtual hub.

[annerajb]

Sample command:

az network vhub route add -g rg-Hub --vhub-name east-us-hub --address-prefixes "32.0.0.0/3" "64.0.0.0/2" "128.0.0.0/3" "160.0.0.0/5" "160.0.0.0/7" "170.0.0.0/8" "171.0.0.0/12" "172.32.0.0/11" "172.64.0.0/10" "172.128.0.0/9" "173.0.0.0/8" "174.0.0.0/7" "176.0.0.0/4" "192.0.0.0/9" "192.128.0.0/11" "192.160.0.0/13" "193.0.0.0/8" "194.0.0.0/7" "196.0.0.0/6" "200.0.0.0/5" "224.0.0.0/3" 
--next-hop "10.0.1.4"

This command returns a error like this:

CannotChangeP2SVpnGatewayForExistingHub - Cannot change P2SVpnGateway for existing hub /subscriptions/subscription_id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/east-us-hub. The existing P2SVpnGateway is /subscriptions/subscription_id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/p2sVpnGateways/asdasdasd-eastus-p2s-gw, the new P2SVpnGateway is .

If I run the list command I am able to see exactly the same routes shown on the website of the virtual hub routing table.
if I try adding routes from the CLI it returns the error about modifying an existing one.

Same error is detected when a route is tried to be removed using the remove command.

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 2560f9e0-4b2e-4bba-3cf2-14f8918a73d1
• Version Independent ID: 5a4c158d-e801-f9d2-29ac-72086ce5436e
• Content: az network vhub route
• Content Source: latest/docs-ref-autogen/ext/virtual-wan/network/vhub/route.yml
• GitHub Login: @rloutlaw
• Microsoft Alias: routlaw

[bim-msft]

@myronfanqiu Please take a look.

[mmyyrroonn]

@annerajb Hello. Can you run this command with --debug and paste the log? Can you describe your scenario?

[annerajb]

Sure here is the debug version.
it seems that if the point to site gateway is already provisioned it cannot modify the routes for it.

Sure here is the debug version.
it seems that if the point to site gateway is already provisioned it cannot modify the routes for it.
az network vhub route add -g rg-Hub --vhub-name hic-sec-vhub-east-us  --address-prefixes "1.0.0.0/8" "2.0.0.0/7" "4.0.0.0/6" "8.0.0.0/7" "11.0.0.0/8"  "32.0.0.0/3" "64.0.0.0/2" "128.0.0.0/3" "160.0.0.0/5" "160.0.0.0/7" "170.0.0.0/8" "171.0.0.0/12" "172.32.0.0/11" "172.64.0.0/10" "172.128.0.0/9" "173.0.0.0/8" "174.0.0.0/7" "176.0.0.0/4" "192.0.0.0/9" "192.128.0.0/11" "192.160.0.0/13" "193.0.0.0/8" "194.0.0.0/7" "196.0.0.0/6" "200.0.0.0/5" "224.0.0.0/3" --debug --next-hop "10.0.1.4"
Command arguments: ['network', 'vhub', 'route', 'add', '-g', 'rg-Hub', '--vhub-name', 'hic-sec-vhub-east-us', '--address-prefixes', '1.0.0.0/8', '2.0.0.0/7', '4.0.0.0/6', '8.0.0.0/7', '11.0.0.0/8', '32.0.0.0/3', '64.0.0.0/2', '128.0.0.0/3', '160.0.0.0/5', '160.0.0.0/7', '170.0.0.0/8', '171.0.0.0/12', '172.32.0.0/11', '172.64.0.0/10', '172.128.0.0/9', '173.0.0.0/8', '174.0.0.0/7', '176.0.0.0/4', '192.0.0.0/9', '192.128.0.0/11', '192.160.0.0/13', '193.0.0.0/8', '194.0.0.0/7', '196.0.0.0/6', '200.0.0.0/5', '224.0.0.0/3', '--debug', '--next-hop', '10.0.1.4']
Event: Cli.PreExecute []
Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x1040b38c0>, <function OutputProducer.on_global_arguments at 0x104181560>, <function CLIQuery.on_global_arguments at 0x1041b2170>]
Event: CommandInvoker.OnPreCommandTableCreate []
Installed command modules ['acr', 'acs', 'advisor', 'ams', 'apim', 'appconfig', 'appservice', 'backup', 'batch', 'batchai', 'billing', 'botservice', 'cdn', 'cloud', 'cognitiveservices', 'configure', 'consumption', 'container', 'cosmosdb', 'deploymentmanager', 'dla', 'dls', 'dms', 'eventgrid', 'eventhubs', 'extension', 'feedback', 'find', 'hdinsight', 'interactive', 'iot', 'iotcentral', 'keyvault', 'kusto', 'lab', 'managedservices', 'maps', 'monitor', 'natgateway', 'netappfiles', 'network', 'policyinsights', 'privatedns', 'profile', 'rdbms', 'redis', 'relay', 'reservations', 'resource', 'role', 'search', 'security', 'servicebus', 'servicefabric', 'signalr', 'sql', 'sqlvm', 'storage', 'vm']
Loaded module 'acr' in 0.005 seconds.
Loaded module 'acs' in 0.008 seconds.
Loaded module 'advisor' in 0.002 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'ams' in 0.005 seconds.
Loaded module 'apim' in 0.002 seconds.
Loaded module 'appconfig' in 0.003 seconds.
Loaded module 'appservice' in 0.020 seconds.
Loaded module 'backup' in 0.004 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'batch' in 0.009 seconds.
Loaded module 'batchai' in 0.004 seconds.
Loaded module 'billing' in 0.002 seconds.
Loaded module 'botservice' in 0.004 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'cdn' in 0.003 seconds.
Loaded module 'cloud' in 0.002 seconds.
Loaded module 'cognitiveservices' in 0.002 seconds.
Loaded module 'configure' in 0.001 seconds.
Loaded module 'consumption' in 0.003 seconds.
Loaded module 'container' in 0.002 seconds.
Loaded module 'cosmosdb' in 0.006 seconds.
Loaded module 'deploymentmanager' in 0.002 seconds.
Loaded module 'dla' in 0.004 seconds.
Loaded module 'dls' in 0.003 seconds.
Loaded module 'dms' in 0.002 seconds.
Loaded module 'eventgrid' in 0.002 seconds.
Loaded module 'eventhubs' in 0.005 seconds.
Loaded module 'extension' in 0.001 seconds.
Loaded module 'feedback' in 0.001 seconds.
Loaded module 'find' in 0.001 seconds.
Loaded module 'hdinsight' in 0.002 seconds.
Loaded module 'interactive' in 0.000 seconds.
Loaded module 'iot' in 0.004 seconds.
Loaded module 'iotcentral' in 0.002 seconds.
Loaded module 'keyvault' in 0.005 seconds.
Loaded module 'kusto' in 0.002 seconds.
Loaded module 'lab' in 0.004 seconds.
Loaded module 'managedservices' in 0.002 seconds.
Loaded module 'maps' in 0.002 seconds.
Loaded module 'monitor' in 0.006 seconds.
Loaded module 'natgateway' in 0.002 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'netappfiles' in 0.003 seconds.
Loaded module 'network' in 0.027 seconds.
Loaded module 'policyinsights' in 0.002 seconds.
Loaded module 'privatedns' in 0.004 seconds.
Loaded module 'profile' in 0.002 seconds.
Loaded module 'rdbms' in 0.006 seconds.
Loaded module 'redis' in 0.002 seconds.
Loaded module 'relay' in 0.003 seconds.
Loaded module 'reservations' in 0.002 seconds.
Loaded module 'resource' in 0.005 seconds.
Loaded module 'role' in 0.004 seconds.
Loaded module 'search' in 0.002 seconds.
Loaded module 'security' in 0.002 seconds.
Loaded module 'servicebus' in 0.006 seconds.
Loaded module 'servicefabric' in 0.002 seconds.
Loaded module 'signalr' in 0.002 seconds.
Loaded module 'sql' in 0.006 seconds.
Loaded module 'sqlvm' in 0.002 seconds.
Event: CommandLoader.OnLoadCommandTable []
Loaded module 'storage' in 0.023 seconds.
Loaded module 'vm' in 0.013 seconds.
Loaded all modules in 0.261 seconds. (note: there's always an overhead with the first module loaded)
Extensions directory: '/Users/haonguyen/.azure/cliextensions'
Found 1 extensions: ['virtual-wan']
Extensions directory: '/Users/haonguyen/.azure/cliextensions'
Extension compatibility result: is_compatible=True cli_core_version=2.0.78 min_required=2.0.67 max_required=None
Extensions directory: '/Users/haonguyen/.azure/cliextensions'
Loaded extension 'virtual-wan' in 0.004 seconds.
Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x1041dd710>]
az_command_data_logger : command args: network vhub route add -g {} --vhub-name {} --address-prefixes {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} {} --debug --next-hop {}
metadata file logging enabled - writing logs to '/Users/haonguyen/.azure/commands'.
Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x1043859e0>]
Event: CommandInvoker.OnPostArgumentLoad []
Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x1043cc0e0>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x1043cc440>]
Event: CommandInvoker.OnCommandTableLoaded []
Event: CommandInvoker.OnPreParseArgs [<function _documentdb_deprecate at 0x105103c20>]
Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x1041815f0>, <function CLIQuery.handle_query_parameter at 0x1041b2200>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x1043cc170>, <function handler at 0x10526df80>]
Extensions directory: '/Users/haonguyen/.azure/cliextensions'
Extensions directory: '/Users/haonguyen/.azure/cliextensions'
az_command_data_logger : extension name: virtual-wan
az_command_data_logger : extension version: 0.1.2
Getting management service client client_type=NetworkManagementClient
msrest.universal_http.requests : Configuring retry: max_retries=4, backoff_factor=0.8, max_backoff=90
attempting to read file /Users/haonguyen/.azure/accessTokens.json as utf-8-sig
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - Authority:Performing instance discovery: ...
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - Authority:Performing static instance discovery
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - Authority:Authority validated via static instance discovery
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - TokenRequest:Getting token from cache with refresh if necessary.
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - CacheDriver:finding with query keys: {'_clientId': '...', 'userId': '...'}
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - CacheDriver:Looking for potential cache entries: {'_clientId': '...', 'userId': '...'}
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - CacheDriver:Found 6 potential entries.
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - CacheDriver:Resource specific token found.
adal-python : 8dce7c61-9d17-4a69-963b-970b563e2771 - CacheDriver:Returning token from cache lookup, AccessTokenId: b'lkt5Tmk6KOJcNVXz+ksmEUv4BxEvVsfcNVR8GwtNI6Y=', RefreshTokenId: b'4hwash6RC0m8wfxrRBguKzzjy00a7DflInMVK7KKJvc='
msrest.http_logger : Request URL: 'https://management.azure.com/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us?api-version=2018-08-01'
msrest.http_logger : Request method: 'GET'
msrest.http_logger : Request headers:
msrest.http_logger :     'Accept': 'application/json'
msrest.http_logger :     'accept-language': 'en-US'
msrest.http_logger :     'User-Agent': 'python/3.7.6 (Darwin-19.2.0-x86_64-i386-64bit) msrest/0.6.10 msrest_azure/0.6.2 networkmanagementclient/2.2.0 Azure-SDK-For-Python AZURECLI/2.0.78'
msrest.http_logger : Request body:
msrest.http_logger : None
msrest.universal_http : Configuring redirects: allow=True, max=30
msrest.universal_http : Configuring request: timeout=100, verify=True, cert=None
msrest.universal_http : Configuring proxies: ''
msrest.universal_http : Evaluate proxies against ENV settings: True
urllib3.connectionpool : Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool : https://management.azure.com:443 "GET /subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us?api-version=2018-08-01 HTTP/1.1" 200 None
msrest.http_logger : Response status: 200
msrest.http_logger : Response headers:
msrest.http_logger :     'Cache-Control': 'no-cache'
msrest.http_logger :     'Pragma': 'no-cache'
msrest.http_logger :     'Transfer-Encoding': 'chunked'
msrest.http_logger :     'Content-Type': 'application/json; charset=utf-8'
msrest.http_logger :     'Content-Encoding': 'gzip'
msrest.http_logger :     'Expires': '-1'
msrest.http_logger :     'Vary': 'Accept-Encoding'
msrest.http_logger :     'x-ms-request-id': 'd30e3890-f11f-4056-8523-436973b556a6'
msrest.http_logger :     'x-ms-correlation-request-id': '7f0048ed-b06b-4af7-ac51-a826c83952d0'
msrest.http_logger :     'x-ms-arm-service-request-id': '042ffb4d-6040-4448-9627-6361febb4850'
msrest.http_logger :     'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
msrest.http_logger :     'Server': 'Microsoft-HTTPAPI/2.0, Microsoft-HTTPAPI/2.0'
msrest.http_logger :     'x-ms-ratelimit-remaining-subscription-reads': '11999'
msrest.http_logger :     'x-ms-routing-request-id': 'CANADAEAST:20200102T165127Z:7f0048ed-b06b-4af7-ac51-a826c83952d0'
msrest.http_logger :     'X-Content-Type-Options': 'nosniff'
msrest.http_logger :     'Date': 'Thu, 02 Jan 2020 16:51:29 GMT'
msrest.http_logger : Response content:
msrest.http_logger : {
  "name": "hic-sec-vhub-east-us",
  "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us",
  "etag": "W/\"d404965b-db6b-4777-9f2f-77d1ee3f12b9\"",
  "type": "Microsoft.Network/virtualHubs",
  "location": "eastus",
  "properties": {
    "provisioningState": "Succeeded",
    "virtualNetworkConnections": [
      {
        "name": "aads-dns",
        "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/aads-dns",
        "etag": "W/\"d404965b-db6b-4777-9f2f-77d1ee3f12b9\"",
        "properties": {
          "provisioningState": "Succeeded",
          "resourceGuid": "69395556-4479-467a-b99e-5dd47f9de1f8",
          "remoteVirtualNetwork": {
            "id": "/subscriptions/22649ff9-eaaf-477f-841e-c76544e2493a/resourceGroups/HIC-azure-ad/providers/Microsoft.Network/virtualNetworks/HIC-azure-ad"
          },
          "allowHubToRemoteVnetTransit": true,
          "allowRemoteVnetToUseHubVnetGateways": true,
          "enableInternetSecurity": false
        },
        "type": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections"
      },
      {
        "name": "rancher2-clusters",
        "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/rancher2-clusters",
        "etag": "W/\"d404965b-db6b-4777-9f2f-77d1ee3f12b9\"",
        "properties": {
          "provisioningState": "Succeeded",
          "resourceGuid": "ad05b294-377d-4ffd-8bf7-120eb322bade",
          "remoteVirtualNetwork": {
            "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-rancher2/providers/Microsoft.Network/virtualNetworks/vnet-rancher2"
          },
          "allowHubToRemoteVnetTransit": true,
          "allowRemoteVnetToUseHubVnetGateways": true,
          "enableInternetSecurity": false
        },
        "type": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections"
      },
      {
        "name": "aosp-build-servers",
        "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/aosp-build-servers",
        "etag": "W/\"d404965b-db6b-4777-9f2f-77d1ee3f12b9\"",
        "properties": {
          "provisioningState": "Succeeded",
          "resourceGuid": "0ba7e0a6-cea6-49cf-a08d-dde9f766ee43",
          "remoteVirtualNetwork": {
            "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-rancher2-clusters/providers/Microsoft.Network/virtualNetworks/r2-clusters-net"
          },
          "allowHubToRemoteVnetTransit": true,
          "allowRemoteVnetToUseHubVnetGateways": true,
          "enableInternetSecurity": false
        },
        "type": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections"
      },
      {
        "name": "fw-spoke",
        "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/fw-spoke",
        "etag": "W/\"d404965b-db6b-4777-9f2f-77d1ee3f12b9\"",
        "properties": {
          "provisioningState": "Succeeded",
          "resourceGuid": "7b74e4c5-e96b-4864-b4f3-32f2d150b718",
          "remoteVirtualNetwork": {
            "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualNetworks/VirtualNetwork"
          },
          "allowHubToRemoteVnetTransit": true,
          "allowRemoteVnetToUseHubVnetGateways": true,
          "enableInternetSecurity": false
        },
        "type": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections"
      },
      {
        "name": "aosp",
        "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/aosp",
        "etag": "W/\"d404965b-db6b-4777-9f2f-77d1ee3f12b9\"",
        "properties": {
          "provisioningState": "Succeeded",
          "resourceGuid": "a506b738-cae0-4506-8901-f8f2cf76c02e",
          "remoteVirtualNetwork": {
            "id": "/subscriptions/d0b9d313-0a15-4a8b-a8a4-febde0624767/resourceGroups/rg-build-servers/providers/Microsoft.Network/virtualNetworks/aosp-vnet"
          },
          "allowHubToRemoteVnetTransit": true,
          "allowRemoteVnetToUseHubVnetGateways": true,
          "enableInternetSecurity": false
        },
        "type": "Microsoft.Network/virtualHubs/hubVirtualNetworkConnections"
      }
    ],
    "addressPrefix": "10.3.0.0/16",
    "routeTable": {
      "routes": []
    },
    "virtualWan": {
      "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualWans/hic-wan"
    },
    "vpnGateway": {
      "id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/vpnGateways/hic-sec-vhub-east-us_vpnGateway"
    }
  }
}
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - Authority:Performing instance discovery: ...
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - Authority:Performing static instance discovery
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - Authority:Authority validated via static instance discovery
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - TokenRequest:Getting token from cache with refresh if necessary.
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - CacheDriver:finding with query keys: {'_clientId': '...', 'userId': '...'}
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - CacheDriver:Looking for potential cache entries: {'_clientId': '...', 'userId': '...'}
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - CacheDriver:Found 6 potential entries.
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - CacheDriver:Resource specific token found.
adal-python : b1871f10-dfd8-4fe1-9fe7-d997998fe916 - CacheDriver:Returning token from cache lookup, AccessTokenId: b'lkt5Tmk6KOJcNVXz+ksmEUv4BxEvVsfcNVR8GwtNI6Y=', RefreshTokenId: b'4hwash6RC0m8wfxrRBguKzzjy00a7DflInMVK7KKJvc='
msrest.http_logger : Request URL: 'https://management.azure.com/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us?api-version=2018-08-01'
msrest.http_logger : Request method: 'PUT'
msrest.http_logger : Request headers:
msrest.http_logger :     'Accept': 'application/json'
msrest.http_logger :     'Content-Type': 'application/json; charset=utf-8'
msrest.http_logger :     'accept-language': 'en-US'
msrest.http_logger :     'Content-Length': '3815'
msrest.http_logger :     'User-Agent': 'python/3.7.6 (Darwin-19.2.0-x86_64-i386-64bit) msrest/0.6.10 msrest_azure/0.6.2 networkmanagementclient/2.2.0 Azure-SDK-For-Python AZURECLI/2.0.78'
msrest.http_logger : Request body:
msrest.http_logger : {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us", "location": "eastus", "properties": {"virtualWan": {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualWans/hic-wan"}, "vpnGateway": {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/vpnGateways/hic-sec-vhub-east-us_vpnGateway"}, "virtualNetworkConnections": [{"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/aads-dns", "properties": {"remoteVirtualNetwork": {"id": "/subscriptions/22649ff9-eaaf-477f-841e-c76544e2493a/resourceGroups/HIC-azure-ad/providers/Microsoft.Network/virtualNetworks/HIC-azure-ad"}, "allowHubToRemoteVnetTransit": true, "allowRemoteVnetToUseHubVnetGateways": true, "enableInternetSecurity": false, "provisioningState": "Succeeded"}, "name": "aads-dns"}, {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/rancher2-clusters", "properties": {"remoteVirtualNetwork": {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-rancher2/providers/Microsoft.Network/virtualNetworks/vnet-rancher2"}, "allowHubToRemoteVnetTransit": true, "allowRemoteVnetToUseHubVnetGateways": true, "enableInternetSecurity": false, "provisioningState": "Succeeded"}, "name": "rancher2-clusters"}, {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/aosp-build-servers", "properties": {"remoteVirtualNetwork": {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-rancher2-clusters/providers/Microsoft.Network/virtualNetworks/r2-clusters-net"}, "allowHubToRemoteVnetTransit": true, "allowRemoteVnetToUseHubVnetGateways": true, "enableInternetSecurity": false, "provisioningState": "Succeeded"}, "name": "aosp-build-servers"}, {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/fw-spoke", "properties": {"remoteVirtualNetwork": {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualNetworks/VirtualNetwork"}, "allowHubToRemoteVnetTransit": true, "allowRemoteVnetToUseHubVnetGateways": true, "enableInternetSecurity": false, "provisioningState": "Succeeded"}, "name": "fw-spoke"}, {"id": "/subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us/hubVirtualNetworkConnections/aosp", "properties": {"remoteVirtualNetwork": {"id": "/subscriptions/d0b9d313-0a15-4a8b-a8a4-febde0624767/resourceGroups/rg-build-servers/providers/Microsoft.Network/virtualNetworks/aosp-vnet"}, "allowHubToRemoteVnetTransit": true, "allowRemoteVnetToUseHubVnetGateways": true, "enableInternetSecurity": false, "provisioningState": "Succeeded"}, "name": "aosp"}], "addressPrefix": "10.3.0.0/16", "routeTable": {"routes": [{"addressPrefixes": ["1.0.0.0/8", "2.0.0.0/7", "4.0.0.0/6", "8.0.0.0/7", "11.0.0.0/8", "32.0.0.0/3", "64.0.0.0/2", "128.0.0.0/3", "160.0.0.0/5", "160.0.0.0/7", "170.0.0.0/8", "171.0.0.0/12", "172.32.0.0/11", "172.64.0.0/10", "172.128.0.0/9", "173.0.0.0/8", "174.0.0.0/7", "176.0.0.0/4", "192.0.0.0/9", "192.128.0.0/11", "192.160.0.0/13", "193.0.0.0/8", "194.0.0.0/7", "196.0.0.0/6", "200.0.0.0/5", "224.0.0.0/3"], "nextHopIpAddress": "10.0.1.4"}]}, "provisioningState": "Succeeded"}}
msrest.universal_http : Configuring redirects: allow=True, max=30
msrest.universal_http : Configuring request: timeout=100, verify=True, cert=None
msrest.universal_http : Configuring proxies: ''
msrest.universal_http : Evaluate proxies against ENV settings: True
urllib3.connectionpool : Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool : https://management.azure.com:443 "PUT /subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us?api-version=2018-08-01 HTTP/1.1" 400 520
msrest.http_logger : Response status: 400
msrest.http_logger : Response headers:
msrest.http_logger :     'Cache-Control': 'no-cache'
msrest.http_logger :     'Pragma': 'no-cache'
msrest.http_logger :     'Content-Length': '520'
msrest.http_logger :     'Content-Type': 'application/json; charset=utf-8'
msrest.http_logger :     'Expires': '-1'
msrest.http_logger :     'x-ms-request-id': 'a605c5ed-8a7b-4cea-a96c-ec7089a497ec'
msrest.http_logger :     'x-ms-correlation-request-id': '0a3c1d43-4171-475f-88f7-41b092ec0798'
msrest.http_logger :     'x-ms-arm-service-request-id': 'f9b092ce-db32-4a24-bd8d-7ca502b76445'
msrest.http_logger :     'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
msrest.http_logger :     'Server': 'Microsoft-HTTPAPI/2.0, Microsoft-HTTPAPI/2.0'
msrest.http_logger :     'x-ms-ratelimit-remaining-subscription-writes': '1199'
msrest.http_logger :     'x-ms-routing-request-id': 'CANADAEAST:20200102T165131Z:0a3c1d43-4171-475f-88f7-41b092ec0798'
msrest.http_logger :     'X-Content-Type-Options': 'nosniff'
msrest.http_logger :     'Date': 'Thu, 02 Jan 2020 16:51:31 GMT'
msrest.http_logger : Response content:
msrest.http_logger : {
  "error": {
    "code": "CannotChangeP2SVpnGatewayForExistingHub",
    "message": "Cannot change P2SVpnGateway for existing hub /subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us. The existing P2SVpnGateway is /subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/p2sVpnGateways/d1ec9e11d53742ee95ee2783c63852c8-eastus-p2s-gw, the new P2SVpnGateway is .",
    "details": []
  }
}
msrest.exceptions : Operation returned an invalid status code 'Bad Request'
cli.azure.cli.core.util : CannotChangeP2SVpnGatewayForExistingHub - Cannot change P2SVpnGateway for existing hub /subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us. The existing P2SVpnGateway is /subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/p2sVpnGateways/d1ec9e11d53742ee95ee2783c63852c8-eastus-p2s-gw, the new P2SVpnGateway is .
CannotChangeP2SVpnGatewayForExistingHub - Cannot change P2SVpnGateway for existing hub /subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/virtualHubs/hic-sec-vhub-east-us. The existing P2SVpnGateway is /subscriptions/subscription-id_redacted/resourceGroups/rg-Hub/providers/Microsoft.Network/p2sVpnGateways/d1ec9e11d53742ee95ee2783c63852c8-eastus-p2s-gw, the new P2SVpnGateway is .
az_command_data_logger : exit code: 1
telemetry.save : Save telemetry record of length 2650 in cache
telemetry.check : Negative: The /Users/haonguyen/.azure/telemetry.txt was modified at 2020-01-02 11:50:52.242357, which in less than 600.000000 s
command ran in 32.430 seconds.

[mmyyrroonn]

@dedhar Hello. Looks like it's a server limitation. Could you take a look at this issue?