You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
1. Go to one of the virtual networks in the portal and select **Peerings** under *Settings*. You should see a new peering connection create between the hub and the spokes virtual network with *AVNM* in the name.
145
+
1. Go to one of the virtual networks in the portal and select **Peerings** under *Settings*. You should see a new peering connection create between the hub and the spokes virtual network with *ANM* in the name.
146
146
147
147
1. To test *direct connectivity* between spokes, deploy a virtual machine into each spokes virtual network. Then start an ICMP request from one virtual machine to the other.
Copy file name to clipboardExpand all lines: articles/virtual-network-manager/how-to-create-hub-and-spoke.md
+57-36Lines changed: 57 additions & 36 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,11 +1,11 @@
1
1
---
2
2
title: 'Create a hub and spoke topology with Azure Virtual Network Manager (Preview)'
3
3
description: Learn how to create a hub and spoke network topology with Azure Virtual Network Manager.
4
-
author: duongau
5
-
ms.author: duau
4
+
author: mbender-ms
5
+
ms.author: mbender
6
6
ms.service: virtual-network-manager
7
7
ms.topic: how-to
8
-
ms.date: 11/02/2021
8
+
ms.date: 05/03/2022
9
9
ms.custom: template-concept, ignite-fall-2021
10
10
---
11
11
@@ -30,90 +30,111 @@ This section will help you create a network group containing the virtual network
30
30
31
31
1. Go to your Azure Virtual Network Manager instance. This how-to guide assumes you've created one using the [quickstart](create-virtual-network-manager-portal.md) guide.
32
32
33
-
1. Select **Network groups** under *Settings*, and then select **+ Add** to create a new network group.
33
+
1. Select **Network groups** under *Settings*, and then select **+ Create** to create a new network group.
34
34
35
-
:::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/add-network-group.png" alt-text="Screenshot of add a network group button.":::
35
+
:::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/add-network-group.png" alt-text="Screenshot of Create a network group button.":::
36
36
37
-
1. On the *Basics* tab, enter a **Name** and a **Description** for the network group.
37
+
1. On the *Create a network group* page, enter a **Name** and a **Description** for the network group. Then select **Add** to create the network group.
38
38
39
-
:::image type="content" source="./media/how-to-create-hub-and-spoke/basics.png" alt-text="Screenshot of basics tab for add a network group.":::
39
+
:::image type="content" source="./media/create-virtual-network-manager-portal/network-group-basics.png" alt-text="Screenshot of create a network group page.":::
40
40
41
-
1. To add virtual network manually, select the **Static group members** tab. For more information, see [static members](concept-network-groups.md#static-membership).
41
+
1. You'll see the new network group added to the *Network Groups* page.
42
+
:::image type="content" source="./media/create-virtual-network-manager-portal/network-groups-list.png" alt-text="Screenshot of network group page with list of network groups.":::
42
43
43
-
:::image type="content" source="./media/how-to-create-hub-and-spoke/static-group.png" alt-text="Screenshot of static group members tab.":::
44
+
1. From the list of network groups, select **myNetworkGroup** to manage the network group memberships.
44
45
45
-
1. To add virtual networks dynamically, select the **Conditional statements** tab. For more information, see [dynamic membership](concept-network-groups.md#dynamic-membership).
46
+
:::image type="content" source="media/how-to-create-mesh-network/manage-group-membership.png" alt-text="Screenshot of manage group memberships page.":::
46
47
47
-
:::image type="content" source="./media/how-to-create-hub-and-spoke/conditional-statements.png" alt-text="Screenshot of conditional statements tab.":::
48
+
1. To add a virtual network manually, select the **Add** button under *Static membership*, and select the virtual networks to add. Then select **Add** to save the static membership. For more information, see [static members](concept-network-groups.md#static-membership).
48
49
49
-
1. Once you're satisfied with the virtual networks selected for the network group, select **Review + create**. Then select **Create** once validation has passed.
50
+
:::image type="content" source="./media/how-to-create-hub-and-spoke/add-static-members.png" alt-text="Screenshot of add virtual networks to network group page.":::
51
+
52
+
1. To add virtual networks dynamically, select the **Define** button under *Define dynamic membership*, and then enter the conditional statements for membership. Select **Save** to save the dynamic membership conditions. For more information, see [dynamic membership](concept-network-groups.md#dynamic-membership).
53
+
54
+
:::image type="content" source="media/how-to-create-mesh-network/define-dynamic-members.png" alt-text="Screenshot of Define dynamic membership page.":::
50
55
51
56
## Create a hub and spoke connectivity configuration
52
57
53
58
This section will guide you through how to create a hub-and-spoke configuration with the network group you created in the previous section.
54
59
55
-
1. Select **Configuration** under *Settings*, then select **+ Add a configuration**.
60
+
1. Select **Configuration** under *Settings*, then select **+ Create**.
56
61
57
-
:::image type="content" source="./media/how-to-create-hub-and-spoke/configuration-list.png" alt-text="Screenshot of the configurations list.":::
62
+
:::image type="content" source="./media/create-virtual-network-manager-portal/add-configuration.png" alt-text="Screenshot of the configurations list.":::
58
63
59
-
1. Select **Connectivity** from the drop-down menu.
64
+
1. Select **Connectivity configuration** from the drop-down menu.
60
65
61
66
:::image type="content" source="./media/create-virtual-network-manager-portal/configuration-menu.png" alt-text="Screenshot of configuration drop-down menu.":::
62
67
63
-
1. On the *Add a connectivity configuration* page, enter, or select the following information:
68
+
1. On the *Add a connectivity configuration* page, enter the following information:
64
69
65
-
:::image type="content" source="./media/how-to-create-hub-and-spoke/connectivity-configuration.png" alt-text="Screenshot of add a connectivity configuration page.":::
70
+
:::image type="content" source="media/how-to-create-mesh-network/add-config-name.png" alt-text="Screenshot of add a connectivity configuration page.":::
66
71
67
72
| Setting | Value |
68
73
| ------- | ----- |
69
74
| Name | Enter a *name* for this configuration. |
70
75
| Description |*Optional* Enter a description about what this configuration will do. |
71
-
| Topology | Select the **Hub and spoke** topology. |
72
-
| Hub | Select a virtual network that will act as the hub virtual network. |
73
-
| Existing peerings | Select this checkbox if you want to remove all previously created VNet peering between virtual networks in the network group defined in this configuration. |
74
76
75
-
1. Then select **+ Add network groups**.
77
+
1. Select **Next: Topology >**. Select **Hub and Spoke** under the **Topology** setting. This selection will reveal more settings.
78
+
79
+
:::image type="content" source="./media/tutorial-create-secured-hub-and-spoke/hub-configuration.png" alt-text="Screenshot of selecting a hub for the connectivity configuration.":::
80
+
81
+
1. Select **Select a hub** under **Hub** setting. Then, select the virtual network to serve as your network hub and click **Select**.
76
82
77
-
1. On the *Add network groups* page, select the network groups you want to add to this configuration. Then select **Add** to save.
83
+
:::image type="content" source="media/tutorial-create-secured-hub-and-spoke/select-hub.png" alt-text="Screenshot of Select a hub configuration.":::
84
+
85
+
1. Under **Spoke network groups**, select **+ add**. Then, select your network group and click **Select**.
86
+
87
+
:::image type="content" source="media/how-to-create-hub-and-spoke/add-network-group.png" alt-text="Screenshot of Add network groups page.":::
88
+
89
+
1. You'll see the following three options appear next to the network group name under **Spoke network groups**:
78
90
79
-
1. You'll see the following three options appear next to the network group name under *Spoke network groups*:
80
-
81
91
:::image type="content" source="./media/how-to-create-hub-and-spoke/spokes-settings.png" alt-text="Screenshot of spoke network groups settings." lightbox="./media/how-to-create-hub-and-spoke/spokes-settings-expanded.png":::
82
92
83
-
**Direct connectivity*: Select **Enable peering within network group** if you want to establish VNet peering between virtual networks in the network group of the same region.
84
-
**Global Mesh*: Select **Enable mesh connectivity across regions** if you want to establish VNet peering for all virtual networks in the network group across regions.
85
-
**Gateway*: Select **Use hub as a gateway** if you have a virtual network gateway in the hub virtual network that you want this network group to use to pass traffic to on-premises.
93
+
| Setting | Value |
94
+
| ------- | ----- |
95
+
| Direct connectivity | Select **Enable peering within network group** if you want to establish VNet peering between virtual networks in the network group of the same region. |
96
+
| Gateway | Select **Hub as a gateway** if you have a virtual network gateway in the hub virtual network that you want this network group to use to pass traffic to on-premises. This option won't be available unless a virtual network gateway is deployed in the hub virtual network. |
97
+
| Global Mesh | Select **Enable mesh connectivity across regions** if you want to establish VNet peering for all virtual networks in the network group across regions. This option requires you select **Enable peering within network group** first. |
86
98
87
99
Select the settings you want to enable for each network group.
88
100
89
-
1. Finally, select**Add** to create the hub-and-spoke connectivity configuration.
101
+
1. Finally, Select**Next: Review + create >** and then **Create** to create the hub-and-spoke connectivity configuration.
90
102
91
103
## Deploy the hub and spoke configuration
92
104
93
-
To have this configuration take effect in your environment, you'll need to deploy the configuration to the regions where your selected virtual network are created.
105
+
To have this configuration take effect in your environment, you'll need to deploy the configuration to the regions where your selected virtual networks are created.
106
+
107
+
> [!NOTE]
108
+
> Make sure the virtual network gateway has been successfully deployed before deploying the connectivity configuration. If you deploy a hub and spoke configuration with **Use the hub as a gateway** enabled and there's no gateway, the deployment will fail. For more information, see [use hub as a gateway](concept-connectivity-configuration.md#use-hub-as-a-gateway).
109
+
>
110
+
111
+
1. Select **Deployments** under *Settings*, then select **Deploy configuration**.
112
+
113
+
:::image type="content" source="./media/create-virtual-network-manager-portal/deployments.png" alt-text="Screenshot of deployments page in Network Manager.":::
94
114
95
-
1. Select **Deployments** under *Settings*, then select **Deploy a configuration**.
96
115
97
116
1. On the *Deploy a configuration* select the following settings:
98
117
99
118
:::image type="content" source="./media/how-to-create-hub-and-spoke/deploy.png" alt-text="Screenshot of deploy a configuration page.":::
100
119
101
120
| Setting | Value |
102
121
| ------- | ----- |
103
-
|Configuration type | Select **Connectivity**. |
104
-
| Configurations | Select the name of the configuration you created in the previous section. |
105
-
| Target regions | Select all the regions that apply to virtual networks you select for the configuration. |
122
+
|Configurations | Select elect **Include connectivity configurations in your goal state**. This will reveal more options. |
123
+
|Connectivity Configurations | Select the name of the connectivity configuration you created in the previous section. |
124
+
| Target regions | Select all the regions that include virtual networks you need configuration applied to. |
106
125
107
-
1. Select **Deploy** and then select **OK** to commit the configuration to the selected regions.
126
+
1. Select **Deploy**. You'll see the deployment shows up in the list for those regions. The deployment of the configuration can take several minutes to complete. You can select the **Refresh**button to check on the status of the deployment.
108
127
109
-
1. The deployment of the configuration can take up to 15-20 minutes, select the **Refresh** button to check on the status of the deployment.
128
+
:::image type="content" source="./media/how-to-create-hub-and-spoke/deploy-status.png" alt-text="Screenshot of deployment status screen." lightbox="./media/how-to-create-hub-and-spoke/deploy-status-expanded.png":::
1.Go to one of the virtual networks in the portal and select **Peerings** under *Settings*. You should see a new peering connection created between the hub and the spokes virtual network with *ANM* in the name.
114
133
115
134
1. To test *direct connectivity* between spokes, deploy a virtual machine into each spokes virtual network. Then initiate an ICMP request from one virtual machine to the other.
116
135
136
+
1. See [view applied configuration](how-to-view-applied-configurations.md).
137
+
117
138
## Next steps
118
139
119
140
- Learn about [Security admin rules](concept-security-admins.md)
0 commit comments