You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/nat-gateway/tutorial-hub-spoke-route-nat.md
+42-43Lines changed: 42 additions & 43 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -90,15 +90,15 @@ All outbound internet traffic traverses the NAT gateway to the internet. Use the
90
90
91
91
Use [az group create](/cli/azure/group#az_group_create) to create a resource group.
92
92
93
-
```azurecli-interactive
93
+
```azurecli
94
94
az group create \
95
95
--name test-rg \
96
96
--location eastus2
97
97
```
98
98
99
99
Use [az network public-ip create](/cli/azure/network/public-ip#az_network_public_ip_create) to create a public IP address for the NAT gateway.
100
100
101
-
```azurecli-interactive
101
+
```azurecli
102
102
az network public-ip create \
103
103
--resource-group test-rg \
104
104
--name public-ip-nat \
@@ -109,7 +109,7 @@ az network public-ip create \
109
109
110
110
Use [az network nat gateway create](/cli/azure/network/nat/gateway#az_network_nat_gateway_create) to create the NAT gateway.
111
111
112
-
```azurecli-interactive
112
+
```azurecli
113
113
az network nat gateway create \
114
114
--resource-group test-rg \
115
115
--name nat-gateway \
@@ -203,7 +203,7 @@ It takes a few minutes for the bastion host to deploy. When the virtual network
203
203
204
204
Use [az network vnet create](/cli/azure/network/vnet#az_network_vnet_create) to create the virtual network.
205
205
206
-
```azurecli-interactive
206
+
```azurecli
207
207
az network vnet create \
208
208
--resource-group test-rg \
209
209
--name vnet-hub \
@@ -213,7 +213,7 @@ az network vnet create \
213
213
214
214
Use [az network vnet subnet create](/cli/azure/network/vnet/subnet#az_network_vnet_subnet_create) to create the subnets.
215
215
216
-
```azurecli-interactive
216
+
```azurecli
217
217
az network vnet subnet create \
218
218
--resource-group test-rg \
219
219
--vnet-name vnet-hub \
@@ -236,8 +236,7 @@ az network vnet subnet create \
236
236
237
237
Use [az network public-ip create](/cli/azure/network/public-ip#az_network_public_ip_create) to create a public IP address for the Azure Bastion host.
238
238
239
-
```azurecli-interactive
240
-
# Create public IP for Bastion
239
+
```azurecli
241
240
az network public-ip create \
242
241
--resource-group test-rg \
243
242
--name public-ip-bastion \
@@ -248,7 +247,7 @@ az network public-ip create \
248
247
249
248
Use [az network bastion create](/cli/azure/network/bastion#az_network_bastion_create) to create the Azure Bastion host.
250
249
251
-
```azurecli-interactive
250
+
```azurecli
252
251
az network bastion create \
253
252
--resource-group test-rg \
254
253
--name bastion \
@@ -320,7 +319,7 @@ The private key will download to your local machine. The private key is needed i
320
319
321
320
Use [az network nsg create](/cli/azure/network/nsg#az_network_nsg_create) to create the network security group.
322
321
323
-
```azurecli-interactive
322
+
```azurecli
324
323
az network nsg create \
325
324
--resource-group test-rg \
326
325
--name nsg-nva \
@@ -329,7 +328,7 @@ az network nsg create \
329
328
330
329
Use [az network nic create](/cli/azure/network/nic#az_network_nic_create) to create the network interface.
331
330
332
-
```azurecli-interactive
331
+
```azurecli
333
332
az network nic create \
334
333
--resource-group test-rg \
335
334
--name nic-public \
@@ -340,7 +339,7 @@ az network nic create \
340
339
341
340
Use [az vm create](/cli/azure/vm#az_vm_create) to create the virtual machine. The command will generate SSH keys for the virtual machine for login. Make note of the location of the private key. The private key is needed in later steps for connecting to the virtual machine with Azure Bastion.
342
341
343
-
```azurecli-interactive
342
+
```azurecli
344
343
az vm create \
345
344
--resource-group test-rg \
346
345
--name vm-nva \
@@ -413,7 +412,7 @@ The IP configuration of the primary network interface of the virtual machine is
413
412
414
413
Use [az network nic update](/cli/azure/network/nic#az_network_nic_update) to enable IP forwarding on the primary network interface.
415
414
416
-
```azurecli-interactive
415
+
```azurecli
417
416
az network nic update \
418
417
--resource-group test-rg \
419
418
--name nic-public \
@@ -422,7 +421,7 @@ az network nic update \
422
421
423
422
Use [az network nic ip-config update](/cli/azure/network/nic/ip-config#az_network_nic_ip_config_update) to statically set the private IP address of the virtual machine.
424
423
425
-
```azurecli-interactive
424
+
```azurecli
426
425
az network nic ip-config update \
427
426
--resource-group test-rg \
428
427
--nic-name nic-public \
@@ -433,7 +432,7 @@ az network nic ip-config update \
433
432
434
433
Use [az network nic create](/cli/azure/network/nic#az_network_nic_create) to create the secondary network interface.
435
434
436
-
```azurecli-interactive
435
+
```azurecli
437
436
az network nic create \
438
437
--resource-group test-rg \
439
438
--name nic-private \
@@ -444,15 +443,15 @@ az network nic create \
444
443
445
444
Use [az vm deallocate](/cli/azure/vm#az_vm_deallocate) to shutdown and deallocate the virtual machine.
446
445
447
-
```azurecli-interactive
446
+
```azurecli
448
447
az vm deallocate \
449
448
--resource-group test-rg \
450
449
--name vm-nva
451
450
```
452
451
453
452
Use [az vm nic add](/cli/azure/vm/nic#az_vm_nic_add) to attach the secondary network interface to the virtual machine.
454
453
455
-
```azurecli-interactive
454
+
```azurecli
456
455
az vm nic add \
457
456
--resource-group test-rg \
458
457
--vm-name vm-nva \
@@ -461,7 +460,7 @@ az vm nic add \
461
460
462
461
Use [az vm start](/cli/azure/vm#az_vm_start) to start the virtual machine.
463
462
464
-
```azurecli-interactive
463
+
```azurecli
465
464
az vm start \
466
465
--resource-group test-rg \
467
466
--name vm-nva
@@ -608,7 +607,7 @@ Route tables are used to overwrite Azure's default routing. Create a route table
608
607
609
608
Use [az network route-table create](/cli/azure/network/route-table#az_network_route_table_create) to create the route table.
610
609
611
-
```azurecli-interactive
610
+
```azurecli
612
611
az network route-table create \
613
612
--resource-group test-rg \
614
613
--name route-table-nat-hub \
@@ -617,7 +616,7 @@ az network route-table create \
617
616
618
617
Use [az network route-table route create](/cli/azure/network/route-table/route#az_network_route_table_route_create) to create the route in the route table.
619
618
620
-
```azurecli-interactive
619
+
```azurecli
621
620
az network route-table route create \
622
621
--resource-group test-rg \
623
622
--route-table-name route-table-nat-hub \
@@ -629,7 +628,7 @@ az network route-table route create \
629
628
630
629
Use [az network vnet subnet update](/cli/azure/network/vnet/subnet#az_network_vnet_subnet_update) to associate the route table with the subnet.
631
630
632
-
```azurecli-interactive
631
+
```azurecli
633
632
az network vnet subnet update \
634
633
--resource-group test-rg \
635
634
--vnet-name vnet-hub \
@@ -695,7 +694,7 @@ Create another virtual network in a different region for the first spoke of the
695
694
696
695
Use [az network vnet create](/cli/azure/network/vnet#az_network_vnet_create) to create the virtual network.
697
696
698
-
```azurecli-interactive
697
+
```azurecli
699
698
az network vnet create \
700
699
--resource-group test-rg \
701
700
--name vnet-spoke-1 \
@@ -705,7 +704,7 @@ az network vnet create \
705
704
706
705
Use [az network vnet subnet create](/cli/azure/network/vnet/subnet#az_network_vnet_subnet_create) to create the subnet.
707
706
708
-
```azurecli-interactive
707
+
```azurecli
709
708
az network vnet subnet create \
710
709
--resource-group test-rg \
711
710
--vnet-name vnet-spoke-1 \
@@ -761,7 +760,7 @@ A virtual network peering is used to connect the hub to spoke one and spoke one
761
760
762
761
Use [az network vnet peering create](/cli/azure/network/vnet/peering#az_network_vnet_peering_create) to create the peering from the hub to spoke one.
763
762
764
-
```azurecli-interactive
763
+
```azurecli
765
764
# Create peering from hub to spoke one
766
765
az network vnet peering create \
767
766
--name vnet-hub-to-vnet-spoke-1 \
@@ -848,7 +847,7 @@ Create a route table to force all inter-spoke and internet egress traffic throug
848
847
849
848
Use [az network route-table create](/cli/azure/network/route-table#az_network_route_table_create) to create the route table.
850
849
851
-
```azurecli-interactive
850
+
```azurecli
852
851
az network route-table create \
853
852
--resource-group test-rg \
854
853
--name route-table-nat-spoke-1 \
@@ -857,7 +856,7 @@ az network route-table create \
857
856
858
857
Use [az network route-table route create](/cli/azure/network/route-table/route#az_network_route_table_route_create) to create the route in the route table.
859
858
860
-
```azurecli-interactive
859
+
```azurecli
861
860
az network route-table route create \
862
861
--resource-group test-rg \
863
862
--route-table-name route-table-nat-spoke-1 \
@@ -869,7 +868,7 @@ az network route-table route create \
869
868
870
869
Use [az network vnet subnet update](/cli/azure/network/vnet/subnet#az_network_vnet_subnet_update) to associate the route table with the subnet.
871
870
872
-
```azurecli-interactive
871
+
```azurecli
873
872
az network vnet subnet update \
874
873
--resource-group test-rg \
875
874
--vnet-name vnet-spoke-1 \
@@ -938,7 +937,7 @@ A Windows Server 2022 virtual machine is used to test the outbound internet traf
938
937
939
938
Use [az network nsg create](/cli/azure/network/nsg#az_network_nsg_create) to create the network security group.
940
939
941
-
```azurecli-interactive
940
+
```azurecli
942
941
az network nsg create \
943
942
--resource-group test-rg \
944
943
--name nsg-spoke-1 \
@@ -947,7 +946,7 @@ az network nsg create \
947
946
948
947
Use [az network nsg rule create](/cli/azure/network/nsg/rule#az_network_nsg_rule_create) to create an inbound NSG rule for HTTP.
949
948
950
-
```azurecli-interactive
949
+
```azurecli
951
950
az network nsg rule create \
952
951
--resource-group test-rg \
953
952
--nsg-name nsg-spoke-1 \
@@ -961,7 +960,7 @@ az network nsg rule create \
961
960
962
961
Use [az network nic create](/cli/azure/network/nic#az_network_nic_create) to create the network interface.
963
962
964
-
```azurecli-interactive
963
+
```azurecli
965
964
az network nic create \
966
965
--resource-group test-rg \
967
966
--name nic-1 \
@@ -972,7 +971,7 @@ az network nic create \
972
971
973
972
Use [az vm create](/cli/azure/vm#az_vm_create) to create the Windows Server 2022 virtual machine.
974
973
975
-
```azurecli-interactive
974
+
```azurecli
976
975
az vm create \
977
976
--resource-group test-rg \
978
977
--name vm-spoke-1 \
@@ -1031,7 +1030,7 @@ IIS is installed on the Windows Server 2022 virtual machine to test outbound int
1031
1030
1032
1031
Use [az vm extension set](/cli/azure/vm/extension#az_vm_extension_set) to install IIS on the virtual machine.
1033
1032
1034
-
```azurecli-interactive
1033
+
```azurecli
1035
1034
az vm extension set \
1036
1035
--publisher Microsoft.Compute \
1037
1036
--version 1.8 \
@@ -1099,7 +1098,7 @@ Create the second virtual network for the second spoke of the hub and spoke netw
1099
1098
1100
1099
Use [az network vnet create](/cli/azure/network/vnet#az_network_vnet_create) to create the virtual network.
1101
1100
1102
-
```azurecli-interactive
1101
+
```azurecli
1103
1102
az network vnet create \
1104
1103
--resource-group test-rg \
1105
1104
--name vnet-spoke-2 \
@@ -1109,7 +1108,7 @@ az network vnet create \
1109
1108
1110
1109
Use [az network vnet subnet create](/cli/azure/network/vnet/subnet#az_network_vnet_subnet_create) to create the subnet.
1111
1110
1112
-
```azurecli-interactive
1111
+
```azurecli
1113
1112
az network vnet subnet create \
1114
1113
--resource-group test-rg \
1115
1114
--vnet-name vnet-spoke-2 \
@@ -1173,7 +1172,7 @@ Create a two-way virtual network peer between the hub and spoke two.
1173
1172
1174
1173
Use [az network vnet peering create](/cli/azure/network/vnet/peering#az_network_vnet_peering_create) to create the peering from the hub to spoke two.
1175
1174
1176
-
```azurecli-interactive
1175
+
```azurecli
1177
1176
# Create peering from hub to spoke two
1178
1177
az network vnet peering create \
1179
1178
--name vnet-hub-to-vnet-spoke-2 \
@@ -1260,7 +1259,7 @@ Create a route table to force all outbound internet and inter-spoke traffic thro
1260
1259
1261
1260
Use [az network route-table create](/cli/azure/network/route-table#az_network_route_table_create) to create the route table.
1262
1261
1263
-
```azurecli-interactive
1262
+
```azurecli
1264
1263
az network route-table create \
1265
1264
--resource-group test-rg \
1266
1265
--name route-table-nat-spoke-2 \
@@ -1269,7 +1268,7 @@ az network route-table create \
1269
1268
1270
1269
Use [az network route-table route create](/cli/azure/network/route-table/route#az_network_route_table_route_create) to create the route in the route table.
1271
1270
1272
-
```azurecli-interactive
1271
+
```azurecli
1273
1272
az network route-table route create \
1274
1273
--resource-group test-rg \
1275
1274
--route-table-name route-table-nat-spoke-2 \
@@ -1281,7 +1280,7 @@ az network route-table route create \
1281
1280
1282
1281
Use [az network vnet subnet update](/cli/azure/network/vnet/subnet#az_network_vnet_subnet_update) to associate the route table with the subnet.
1283
1282
1284
-
```azurecli-interactive
1283
+
```azurecli
1285
1284
az network vnet subnet update \
1286
1285
--resource-group test-rg \
1287
1286
--vnet-name vnet-spoke-2 \
@@ -1349,7 +1348,7 @@ Create a Windows Server 2022 virtual machine for the test virtual machine in spo
1349
1348
1350
1349
Use [az network nsg create](/cli/azure/network/nsg#az_network_nsg_create) to create the network security group.
1351
1350
1352
-
```azurecli-interactive
1351
+
```azurecli
1353
1352
az network nsg create \
1354
1353
--resource-group test-rg \
1355
1354
--name nsg-spoke-2 \
@@ -1358,7 +1357,7 @@ az network nsg create \
1358
1357
1359
1358
Use [az network nsg rule create](/cli/azure/network/nsg/rule#az_network_nsg_rule_create) to create an inbound NSG rule for HTTP.
1360
1359
1361
-
```azurecli-interactive
1360
+
```azurecli
1362
1361
az network nsg rule create \
1363
1362
--resource-group test-rg \
1364
1363
--nsg-name nsg-spoke-2 \
@@ -1372,7 +1371,7 @@ az network nsg rule create \
1372
1371
1373
1372
Use [az network nic create](/cli/azure/network/nic#az_network_nic_create) to create the network interface.
1374
1373
1375
-
```azurecli-interactive
1374
+
```azurecli
1376
1375
az network nic create \
1377
1376
--resource-group test-rg \
1378
1377
--name nic-1 \
@@ -1383,7 +1382,7 @@ az network nic create \
1383
1382
1384
1383
Use [az vm create](/cli/azure/vm#az_vm_create) to create the Windows Server 2022 virtual machine.
1385
1384
1386
-
```azurecli-interactive
1385
+
```azurecli
1387
1386
az vm create \
1388
1387
--resource-group test-rg \
1389
1388
--name vm-spoke-2 \
@@ -1442,7 +1441,7 @@ IIS is installed on the Windows Server 2022 virtual machine to test outbound int
1442
1441
1443
1442
Use [az vm extension set](/cli/azure/vm/extension#az_vm_extension_set) to install IIS on the virtual machine.
1444
1443
1445
-
```azurecli-interactive
1444
+
```azurecli
1446
1445
az vm extension set \
1447
1446
--publisher Microsoft.Compute \
1448
1447
--version 1.8 \
@@ -1564,7 +1563,7 @@ Use Microsoft Edge to connect to the web server on **vm-spoke-1** you installed
1564
1563
1565
1564
Use [az group delete](/cli/azure/group#az_group_delete) to delete the resource group.
0 commit comments