You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/modeling-simulation-workbench/how-to-guide-private-network.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -79,7 +79,7 @@ Modeling and Simulation Workbench creates three private domain name service (DNS
79
79
80
80
### Ports and protocols
81
81
82
-
The Azure Modeling and Simulation Workbench require certain ports to be accessible from users workstation. Firewalls and VPNs might block access on these ports to certain destinations, when accessed from certain applications, or when connected to different networks. Check with your system administrator to ensure your client can access the service from all your work locations. When using the private networking connector, all traffic will be through the virtual network gateway or peer. Administrators can choose to implement a firewall or network security group to restrict traffic.
82
+
The Azure Modeling and Simulation Workbench require certain ports to be accessible from users workstation. Firewalls and VPNs might block access on these ports to certain destinations, when accessed from certain applications, or when connected to different networks. Check with your system administrator to ensure your client can access the service from all your work locations. All traffic to the chamber passes through the connector and the virtual network gateway or peer. Administrators can choose to implement a firewall or network security group to restrict traffic.
83
83
84
84
***53/TCP** and **53/UDP**: DNS queries.
85
85
***443/TCP**: Standard https port for accessing the VM dashboard and any Azure portal page.
@@ -88,7 +88,7 @@ The Azure Modeling and Simulation Workbench require certain ports to be accessib
88
88
89
89
### IP addresses
90
90
91
-
The private network connector does not deploy any public IP network interfaces. You create your own gateway interface if connecting directly from the internet. Your choice of which region you deploy your gateway to determines which pool of Azure public IP addresses your gateway will be. Azure IP addresses are taken from Azure's IP ranges for the location in which the Workbench was deployed. A list of all Azure IP addresses and Service tags is available at [Azure IP Ranges and Service Tags – Public Cloud](https://www.microsoft.com/download/details.aspx?id=56519&msockid=1b155eb894cc6c3600a84ac5959a6d3f).
91
+
The private network connector doesn't deploy any public IP network interfaces. You create your own gateway interface if connecting directly from the internet. Your choice of which region you deploy your gateway to determines from which pool of Azure public IP addresses your gateway is chosen. Azure IP addresses are taken from Azure's IP ranges for the location in which the Workbench was deployed. A list of all Azure IP addresses and Service tags is available at [Azure IP Ranges and Service Tags – Public Cloud](https://www.microsoft.com/download/details.aspx?id=56519&msockid=1b155eb894cc6c3600a84ac5959a6d3f).
92
92
93
93
The private IP addresses for the private networking connector are visible private network interface connections on the virtual network's subnet you specified during deployment.
Copy file name to clipboardExpand all lines: articles/modeling-simulation-workbench/how-to-guide-public-network.md
+14-12Lines changed: 14 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,15 +12,15 @@ ms.date: 10/11/2024
12
12
13
13
# Set up a public IP network connector
14
14
15
-
In Azure Modeling and Simulation Workbench, you can deploy a [connector](./concept-connector.md) that is accessible directly from the internet. The public IP connector uses publicly facing IP addresses. By default, access is denied to all incoming IP addresses and must be explictly granted through a specifying an address or address ranges. Public connectors are useful for training sessions, workforce development scenarios, or other open work environments with stable or very shortterm access requirements. All acccess to a chamber occurs through a connector, both the desktop session and the file transfers through the [data pipeline](./concept-data-pipeline.md) are controlled.
15
+
In Azure Modeling and Simulation Workbench, you can deploy a [connector](./concept-connector.md) that is accessible directly from the internet. The public IP connector uses publicly facing IP addresses. By default, access is denied to all incoming IP addresses and must be explictly granted through a specifying an address or address ranges. Public connectors are useful for training sessions, conferences, or other open work environments with stable or short-term requirements. All access to a chamber occurs through a connector, both the desktop session and the file transfers through the [data pipeline](./concept-data-pipeline.md) are controlled.
16
16
17
-
Public connectors are not recommended for use in organzations that:
17
+
Public connectors aren't recommended for use in organizations that:
18
18
19
19
* Have complex network infrastructure
20
20
* Use proxies
21
21
* Require users to access resources through managed VPN user endpoints
22
-
* Have requirements to individually catalog cloud service endpoings
23
-
* Have restrictions on the use of non-standard destination ports
22
+
* Have requirements to individually catalog cloud service endpoints
23
+
* Have restrictions on the use of nonstandard destination ports
24
24
25
25
## Prerequisites
26
26
@@ -46,22 +46,22 @@ Each chamber can have only one connector. If you have a private connector or oth
46
46
47
47
IP addresses can be allowlisted in the Azure portal to allow connections to a chamber. Only one IP address can be specified for a Public IP connector when creating a new Workbench. After the connector is created, you can specify other IP addresses. Standard [CIDR (Classless Inter-Domain Routing)](/azure/virtual-network/virtual-networks-faq) mask notation can be used to allow ranges of IP addresses across a subnet.
48
48
49
-
Addresses and address ranges must not overlap. The CIDR mask is limited at a /24 address space. If larger address spaces are required, you will need to create that address space using /24 subnets.
49
+
Addresses and address ranges must not overlap. The CIDR mask is limited at a /24 address space. If larger address spaces are required, you'll need to create that address space using /24 subnets.
50
50
51
51
Workbench Owners and Chamber Admins can add to and edit the allowlisted public addresses for a connector after the connector object is created.
52
52
53
-
### Add, edit or delete IP addresses or ranges
53
+
### Add, edit, or delete IP addresses or ranges
54
54
55
55
IP addresses and ranges must be explicitly added in order to allow access to the chamber. To edit the list of allowed IP addresses:
56
56
57
57
1. Navigate to the connector where the changes will occur.
58
-
1. In the left pane, select the **Networking** option under the **Settings** section. The list of current IP addresses will appear.
58
+
1. In the left pane, select the **Networking** option under the **Settings** section. The list of current IP addresses appear.
59
59
1. Select **Edit allowed IP**. From here, you can delete existing IP addresses or add new ones.
60
60
:::image type="content" source="media/howtoguide-public-network/edit-allowlist.png" alt-text="Screenshot of public connector overview with Networking settings and Edit buttons highlighted in red.":::
61
61
1. Add, edit, or delete operations can be done from the flyout menu.
62
62
* To add an IP address or range, select the **Add** button and enter a single address.
63
63
* To delete an IP entry, first select the record, then select **Delete**.
64
-
* To edit an IP entry, select the pencil icon on the right, then edit the entry.
64
+
* To edit an IP entry, select the pencil icon at right, then edit the entry.
65
65
:::image type="content" source="media/howtoguide-public-network/edit-allowed-ip.png" alt-text="Screenshot of edit allowed IP page with Add, Delete, select box, edit icon and Save button highlighted in red.":::
66
66
1. Select **Save** to save your changes.
67
67
1. Select **Submit** to submit the updated allowlist to the connector.
@@ -85,12 +85,14 @@ In the portal, scroll down to the *networkAcls* section of the JSON and select t
85
85
86
86
#### [PowerShell](#tab/powershell)
87
87
88
-
If you want to export the JSON using PowerShell, you need to have the Resource ID of the connector. In the JSON view, select the copy icon in the right-hand side of the Resource ID textbox. Assign the Resource Id to a variable.
88
+
If you want to export the JSON using PowerShell, you need to have the Resource ID of the connector. In the JSON view, select the copy icon in the right-hand side of the Resource ID textbox. Assign the Resource ID to a variable.
89
89
90
90
In a PowerShell client, retrieve the connector's property bundle.
@@ -101,7 +103,7 @@ Deleting an IP address from the connector allowlist doesn't terminate active ses
101
103
102
104
## Idle the connector
103
105
104
-
Idle mode sets the chambers into a preserved, but inactive state. Costs are significantly reduced while still maintaining your configuration and settings. Learn more about idle mode in the [Manage chamber idle mode](how-to-guide-chamber-idle.md) article.
106
+
Idle mode sets the chambers into a preserved, but inactive state. Costs are reduced while still maintaining your configuration and settings. Learn more about idle mode in the [Manage chamber idle mode](how-to-guide-chamber-idle.md) article.
105
107
106
108
## Start, stop, or restart a connector
107
109
@@ -143,7 +145,7 @@ Modeling and Simulation Workbench creates three private domain name service (DNS
143
145
144
146
## Delete a connector
145
147
146
-
If you wish to delete the workbench, chamber, or change the connector type, you must first delete the connector. You do not need to delete the IP addresses before deleting a connector, nor does the connector need to be stopped.
148
+
If you wish to delete the workbench, chamber, or change the connector type, you must first delete the connector. You don't need to delete the IP addresses before deleting a connector, nor does the connector need to be stopped.
0 commit comments