Merge pull request #263549 from cherylmc/bastion-subnet

Add AzureBastionSubnet

Author: v-shils

articles/bastion/quickstart-host-portal.md

@@ -5,7 +5,7 @@ description: Learn how to deploy Azure Bastion with default settings from the Az
 author: cherylmc
 ms.service: bastion
 ms.topic: quickstart
-ms.date: 10/12/2023
+ms.date: 01/18/2024
 ms.author: cherylmc
 
 ---
@@ -80,6 +80,14 @@ When you deploy from VM settings, Bastion is automatically configured with the f
 | **Name** | Based on the virtual network name |
 | **Public IP address name** | Based on the virtual network name |
 
+## Configure the AzureBastionSubnet
+
+When you deploy Azure Bastion, resources are created in a specific subnet which must be named **AzureBastionSubnet**. The name of the subnet lets the system know where to deploy resources. Use the following steps to add the AzureBastionSubnet to your virtual network:
+
+[!INCLUDE [Add AzureBastionSubnet](../../includes/bastion-add-subnet-include.md)]
+
+After adding the AzureBastionSubnet, you can continue to the next section and deploy Bastion.
+
 ## <a name="createvmset"></a>Deploy Bastion
 
 When you create an Azure Bastion instance in the portal by using **Deploy Bastion**, you deploy Bastion automatically by using default settings and the Basic SKU. You can't modify, or specify additional values for, a default deployment.

includes/bastion-add-subnet-include.md

@@ -0,0 +1,13 @@
+---
+author: cherylmc
+ms.author: cherylmc
+ms.date: 01/18/2024
+ms.service: bastion
+ms.topic: include
+---
+
+1. On the page for your virtual network, in the left pane, select **Subnets** to open the Subnets page.
+1. At the top of the page, click **+ Subnet** to open the **Add subnet** pane.
+1. For **Name**, you must use **AzureBastionSubnet**.
+1. Adjust the IP address range value, if necessary. We recommend that you use a subnet that's /26 or larger, (/26, /25, or /24). Example subnet value: **10.1.1.0/26**.
+1. Don't adjust the other values on the page. Click **Save** at the bottom of the page to save the subnet.

includes/bastion-failed-subnet.md

@@ -2,11 +2,8 @@
 author: cherylmc
 ms.service: bastion
 ms.topic: include
-ms.date: 10/03/2023
+ms.date: 01/18/2024
 ms.author: cherylmc
 ---
 
-If you get a message that says "Failed to add subnet," you can work around this problem. It sometimes occurs in some regions.
-
-1. Go to the **Subnets** page for your virtual network and add a subnet. The subnet name must be **AzureBastionSubnet**. The subnet address range that you specify must be /26 or larger (for example, /25 or /24).
-1. Select **Deploy Bastion**.
+If you get a message that says "Failed to add subnet", you need to add the **AzureBastionSubnet** subnet to your virtual network before deploying Bastion. Go to the **Subnets** page for your virtual network and add the AzureBastionSubnet. The subnet name must be **AzureBastionSubnet**. The subnet address range that you specify must be /26 or larger (for example, /25 or /24). After adding this subnet to your virtual network, you can deploy Bastion.