Merge pull request #98838 from EMaher/enewman/firewall-settings

firewall settings needed for azure lab services

Author: megvanhuygen

articles/lab-services/classroom-labs/TOC.yml

@@ -56,6 +56,8 @@
       href: how-to-attach-detach-shared-image-gallery.md
     - name: Add user as an owner to a classroom lab
       href: how-to-add-user-lab-owner.md
+    - name: Firewall settings for Azure Lab Services 
+      href: how-to-configure-firewall-settings.md
   - name: Create and configure classroom labs (instructor)
     items:        
     - name: Create and manage classroom labs

articles/lab-services/classroom-labs/how-to-configure-firewall-settings.md

@@ -0,0 +1,32 @@
+---
+title: Firewall settings for Azure Lab Services
+description: Learn how to determine the public IP address and port number range of virtual machines in a lab so information can be added to firewall rules.
+author: emaher
+
+ms.author: enewman
+ms.date: 12/12/2019
+ms.topic: article
+ms.service: lab-services
+---
+# Firewall settings for Azure Lab Services
+
+Each organization or school will set up their own network in a way that best fits their needs.  Sometimes that includes setting firewall rules that block Remote Desktop Protocol (rdp) or Secure Shell (ssh) connections to machines outside their own network.  Because Azure Lab Services runs in the public cloud, some extra configuration maybe needed to allow students to access their VM when connecting from the campus network.
+
+Each lab uses single public IP address and multiple ports.  All VMs, both the template VM and student VMs, will use this public IP address.  The public IP address will not change for the life of lab.  However, each VM will have a different port number.  The port numbers range from 49152 to 65535.  The combination of public IP address and port number is used to connect instructor and students to the correct VM.  This article will cover how to find the specific public IP address used by a lab.  That information can be used to update inbound and outbound firewall rules so students can access their VMs.
+
+>[!IMPORTANT]
+>Each lab will have a different public IP address.
+
+## Find public IP for a lab
+
+The public IP addresses for each lab are listed in the **All labs** blade of the Lab Services lab account.  For directions how to find the **All labs** blade, see [how to manage labs in a lab account](how-to-manage-lab-accounts.md#view-and-manage-labs-in-the-lab-account).  
+
+> [!div class="mx-imgBorder"]
+> ![All labs blade](../media/how-to-configure-firewall-settings/all-labs-properties.png)
+
+>[!NOTE]
+>You won’t see the public IP address if the template machine for your lab isn’t published yet.
+
+## Conclusion
+
+Now we know the public IP address for the lab.  Inbound and outbound rules can be created for the organization's firewall for the public ip address and the port range  49152-65535.  Once the rules are updated, students can access their VMs without the network firewall blocking access.