Merge pull request #109179 from cherylmc/bascli

update

Author: v-shils

articles/bastion/TOC.yml

@@ -20,6 +20,8 @@
       href: bastion-create-host-portal.md
     - name: Azure PowerShell
       href: bastion-create-host-powershell.md
+    - name: Azure CLI
+      href: create-host-cli.md
   - name: Connect to a virtual machine
     items:
     - name: SSH (Linux)

articles/bastion/create-host-cli.md

@@ -0,0 +1,54 @@
+---
+title: 'Create a Bastion host using Azure CLI | Azure Bastion'
+description: In this article, learn how to create and delete a Bastion host
+services: bastion
+author: cherylmc
+
+ms.service: bastion
+ms.topic: conceptual
+ms.date: 03/26/2020
+ms.author: cherylmc
+# Customer intent: As someone with a networking background, I want to create an Azure Bastion host.
+
+---
+
+# Create an Azure Bastion host using Azure CLI
+
+This article shows you how to create an Azure Bastion host using Azure CLI. Once you provision the Azure Bastion service in your virtual network, the seamless RDP/SSH experience is available to all of the VMs in the same virtual network. Azure Bastion deployment is per virtual network, not per subscription/account or virtual machine.
+
+Optionally, you can create an Azure Bastion host by using the [Azure portal](bastion-create-host-portal.md), or using [Azure PowerShell](bastion-create-host-powershell.md).
+
+## Before you begin
+
+Verify that you have an Azure subscription. If you don't already have an Azure subscription, you can activate your [MSDN subscriber benefits](https://azure.microsoft.com/pricing/member-offers/msdn-benefits-details) or sign up for a [free account](https://azure.microsoft.com/pricing/free-trial).
+
+[!INCLUDE [cloudshell cli](../../includes/vpn-gateway-cloud-shell-cli.md)]
+
+## <a name="createhost"></a>Create a bastion host
+
+This section helps you create a new Azure Bastion resource using Azure CLI.
+
+1. Create a virtual network and an Azure Bastion subnet. You must create the Azure Bastion subnet using the name value **AzureBastionSubnet**. This value lets Azure know which subnet to deploy the Bastion resources to. This is different than a Gateway subnet. You must use a subnet of at least /27 or larger subnet (/27, /26, and so on). Create the **AzureBastionSubnet** without any route tables or delegations. If you use Network Security Groups on the **AzureBastionSubnet**, refer to the [Work with NSGs](bastion-nsg.md) article.
+
+   ```azurecli-interactive
+   az network vnet create -g MyResourceGroup -n MyVnet --address-prefix 10.0.0.0/16 --subnet-name AzureBastionSubnet  --subnet-prefix 10.0.0.0/24
+   ```
+
+2. Create a public IP address for Azure Bastion. The public IP is the public IP address the Bastion resource on which RDP/SSH will be accessed (over port 443). The public IP address must be in the same region as the Bastion resource you are creating.
+
+   ```azurecli-interactive
+   az network public-ip create -g MyResourceGroup -n MyIp
+   ```
+
+3. Create a new Azure Bastion resource in the AzureBastionSubnet of your virtual network. It takes about 5 minutes for the Bastion resource to create and deploy.
+
+   ```azurecli-interactive
+   az network bastion create --name $name--public-ip-address $publicip--resource-group $RgName --vnet-name $VNetName --location $location
+                           
+   ```
+
+## Next steps
+
+* Read the [Bastion FAQ](bastion-faq.md) for additional information.
+
+* To use Network Security Groups with the Azure Bastion subnet, see [Work with NSGs](bastion-nsg.md).

includes/vpn-gateway-cloud-shell-cli.md

@@ -0,0 +1,17 @@
+---
+ title: include file
+ description: include file
+ services: vpn-gateway
+ author: cherylmc
+ ms.service: vpn-gateway
+ ms.topic: include
+ ms.date: 03/11/2020
+ ms.author: cherylmc
+ ms.custom: include file
+ 
+ # this file is used for all cli for bastion, VPN Gateway, Virtual WAN, and ExpressRoute
+---
+
+This article uses the Azure CLI. To run commands, you can use Azure Cloud Shell. The Azure Cloud Shell is a free interactive shell that you can use to run the steps in this article. It has common Azure tools preinstalled and configured to use with your account.
+
+To open the Cloud Shell, just select **Try it** from the upper right corner of a code block. You can also launch Cloud Shell in a separate browser tab by going to [https://shell.azure.com](https://shell.azure.com) and toggle the dropdown in the left corner to reflect Bash or PowerShell. Select **Copy** to copy the blocks of code, paste it into the Cloud Shell, and press enter to run it.