backed out some changes to internal vnet article

Author: dlepow

articles/api-management/api-management-using-with-internal-vnet.md

@@ -111,7 +111,15 @@ After successful deployment, you should see your API Management service's **priv
 
 ## DNS configuration
 
-In external VNET mode, Azure manages the DNS. For internal VNET mode, you have to manage your own DNS to enable access to your API Management service endpoints. 
+In external VNET mode, Azure manages the DNS. For internal VNET mode, you have to manage your own DNS to enable inbound access to your API Management service endpoints. 
+
+We recommend:
+
+1. Configure an Azure [DNS private zone](../dns/private-dns-overview.md).
+1. Link the Azure DNS private zone to the VNET into which you've deployed your API Management service. 
+
+Learn how to [set up a private zone in Azure DNS](../dns/private-dns-getstarted-portal.md).
+
 
 > [!NOTE]
 > The API Management service does not listen to requests on its IP addresses. It only responds to requests to the host name configured on its service endpoints. These endpoints include:
@@ -144,7 +152,6 @@ To access these API Management service endpoints, you can create a virtual machi
 
 You can then access all the service endpoints from the virtual machine you created.
 
-
 ### Access on custom domain names
 
 If you don't want to access the API Management service with the default host names: 
@@ -155,14 +162,6 @@ If you don't want to access the API Management service with the default host nam
 
 2. Create records in your DNS server to access the endpoints accessible from within your VNET. Map the endpoint records to the [private virtual IP address](#routing) for your service.
 
-We recommend:
-
-1. Configure an Azure [DNS private zone](../dns/private-dns-overview.md).
-1. Link the Azure DNS private zone to the VNET into which you've deployed your API Management service. 
-1. Create DNS A-records in the private zone to access each of the API Management endpoints.
-
-Learn how to [set up a private zone in Azure DNS](../dns/private-dns-getstarted-portal.md).
-
 ## Routing
 
 The following virtual IP addresses are configured for an API Management instance in an internal virtual network. Learn more about the [IP addresses of API Management](api-management-howto-ip-addresses.md).
@@ -184,7 +183,7 @@ The load-balanced public and private IP addresses can be found on the **Overview
 
 ### VIP and DIP addresses
 
-DIP addresses will be assigned to each underlying virtual machine in the service and used to access resources *within* the VNET. A VIP address will be used to access resources *outside* the VNET. If IP restriction lists secure resources within the VNET, you must specify the entire subnet range where the API Management service is deployed to grant or restrict access from the service.
+Dynamic IP (DIP) addresses will be assigned to each underlying virtual machine in the service and used to access resources *within* the VNET. The API Management service's public virtual IP (VIP) address will be used to access resources *outside* the VNET. If IP restriction lists secure resources within the VNET, you must specify the entire subnet range where the API Management service is deployed to grant or restrict access from the service.
 
 Learn more about the [recommended subnet size](virtual-network-concepts.md#subnet-size).