Skip to content

Commit c0ae60e

Browse files
committed
Freshness review
1 parent 21ffefb commit c0ae60e

File tree

1 file changed

+17
-30
lines changed

1 file changed

+17
-30
lines changed

articles/firewall/tutorial-hybrid-portal.md

Lines changed: 17 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: vhorne
66
ms.service: firewall
77
ms.custom: ignite-2022
88
ms.topic: how-to
9-
ms.date: 04/29/2021
9+
ms.date: 08/31/2023
1010
ms.author: victorh
1111
#Customer intent: As an administrator, I want to control network access from an on-premises network to an Azure virtual network.
1212
---
@@ -25,19 +25,6 @@ For this article, you create three virtual networks:
2525

2626
![Firewall in a hybrid network](media/tutorial-hybrid-ps/hybrid-network-firewall.png)
2727

28-
In this article, you learn how to:
29-
30-
> [!div class="checklist"]
31-
> * Create the firewall hub virtual network
32-
> * Create the spoke virtual network
33-
> * Create the on-premises virtual network
34-
> * Configure and deploy the firewall
35-
> * Create and connect the VPN gateways
36-
> * Peer the hub and spoke virtual networks
37-
> * Create the routes
38-
> * Create the virtual machines
39-
> * Test the firewall
40-
4128
If you want to use Azure PowerShell instead to complete this procedure, see [Deploy and configure Azure Firewall in a hybrid network using Azure PowerShell](tutorial-hybrid-ps.md).
4229

4330
> [!NOTE]
@@ -72,9 +59,9 @@ If you don't have an Azure subscription, create a [free account](https://azure.m
7259
First, create the resource group to contain the resources:
7360

7461
1. Sign in to the [Azure portal](https://portal.azure.com).
75-
2. On the Azure portal home page, select **Resource groups** > **Add**.
62+
2. On the Azure portal home page, select **Resource groups** > **Create**.
7663
3. For **Subscription**, select your subscription.
77-
1. For **Resource group name**, type **FW-Hybrid-Test**.
64+
1. For **Resource group**, type **RG-fw-hybrid-test**.
7865
2. For **Region**, select **(US) East US**. All resources that you create later must be in the same location.
7966
3. Select **Review + Create**.
8067
4. Select **Create**.
@@ -87,7 +74,7 @@ Now, create the VNet:
8774
1. From the Azure portal home page, select **Create a resource**.
8875
2. Under **Networking**, select **Virtual network**.
8976
1. Select **Create**.
90-
1. For **Resource group**, select **FW-Hybrid-Test**.
77+
1. For **Resource group**, select **RG-fw-hybrid-test**.
9178
1. For **Name**, type **VNet-hub**.
9279
1. Select **Next: IP Addresses**.
9380
1. For **IPv4 Address space**, delete the default address and type **10.5.0.0/16**.
@@ -102,7 +89,7 @@ Now, create the VNet:
10289

10390
1. From the Azure portal home page, select **Create a resource**.
10491
2. In **Networking**, select **Virtual network**.
105-
7. For **Resource group**, select **FW-Hybrid-Test**.
92+
7. For **Resource group**, select **RG-fw-hybrid-test**.
10693
1. For **Name**, type **VNet-Spoke**.
10794
2. For **Region**, select **(US) East US**.
10895
3. Select **Next: IP Addresses**.
@@ -118,7 +105,7 @@ Now, create the VNet:
118105

119106
1. From the Azure portal home page, select **Create a resource**.
120107
2. In **Networking**, select **Virtual network**.
121-
7. For **Resource group**, select **FW-Hybrid-Test**.
108+
7. For **Resource group**, select **RG-fw-hybrid-test**.
122109
1. For **Name**, type **VNet-OnPrem**.
123110
2. For **Region**, select **(US) East US**.
124111
3. Select **Next : IP Addresses**
@@ -149,7 +136,7 @@ Now deploy the firewall into the firewall hub virtual network.
149136
|Setting |Value |
150137
|---------|---------|
151138
|Subscription |\<your subscription\>|
152-
|Resource group |**FW-Hybrid-Test** |
139+
|Resource group |**RG-fw-hybrid-test** |
153140
|Name |**AzFW01**|
154141
|Region |**East US**|
155142
|Firewall management|**Use Firewall rules (classic) to manage this firewall**|
@@ -160,7 +147,7 @@ Now deploy the firewall into the firewall hub virtual network.
160147
6. Review the summary, and then select **Create** to create the firewall.
161148

162149
This takes a few minutes to deploy.
163-
7. After deployment completes, go to the **FW-Hybrid-Test** resource group, and select the **AzFW01** firewall.
150+
7. After deployment completes, go to the **RG-fw-hybrid-test** resource group, and select the **AzFW01** firewall.
164151
8. Note the private IP address. You'll use it later when you create the default route.
165152

166153
### Configure network rules
@@ -238,7 +225,7 @@ Now you can create the VPN connections between the hub and on-premises gateways.
238225

239226
In this step, you create the connection from the hub virtual network to the on-premises virtual network. You'll see a shared key referenced in the examples. You can use your own values for the shared key. The important thing is that the shared key must match for both connections. Creating a connection can take a short while to complete.
240227

241-
1. Open the **FW-Hybrid-Test** resource group and select the **GW-hub** gateway.
228+
1. Open the **RG-fw-hybrid-test** resource group and select the **GW-hub** gateway.
242229
2. Select **Connections** in the left column.
243230
3. Select **Add**.
244231
4. For the connection name, type **Hub-to-Onprem**.
@@ -249,7 +236,7 @@ In this step, you create the connection from the hub virtual network to the on-p
249236

250237
Create the on-premises to hub virtual network connection. This step is similar to the previous one, except you create the connection from VNet-Onprem to VNet-hub. Make sure the shared keys match. The connection will be established after a few minutes.
251238

252-
1. Open the **FW-Hybrid-Test** resource group and select the **GW-Onprem** gateway.
239+
1. Open the **RG-fw-hybrid-test** resource group and select the **GW-Onprem** gateway.
253240
2. Select **Connections** in the left column.
254241
3. Select **Add**.
255242
4. For the connection name, type **Onprem-to-Hub**.
@@ -269,7 +256,7 @@ After about five minutes or so, the status of both connections should be **Conne
269256

270257
Now peer the hub and spoke virtual networks.
271258

272-
1. Open the **FW-Hybrid-Test** resource group and select the **VNet-hub** virtual network.
259+
1. Open the **RG-fw-hybrid-test** resource group and select the **VNet-hub** virtual network.
273260
2. In the left column, select **Peerings**.
274261
3. Select **Add**.
275262
4. Under **This virtual network**:
@@ -309,7 +296,7 @@ Next, create a couple routes:
309296
2. In the search text box, type **route table** and press **Enter**.
310297
3. Select **Route table**.
311298
4. Select **Create**.
312-
6. Select the **FW-Hybrid-Test** for the resource group.
299+
6. Select the **RG-fw-hybrid-test** for the resource group.
313300
8. For **Region**, select the same location that you used previously.
314301
1. For the name, type **UDR-Hub-Spoke**.
315302
9. Select **Review + Create**.
@@ -337,7 +324,7 @@ Now create the default route from the spoke subnet.
337324
2. In the search text box, type **route table** and press **Enter**.
338325
3. Select **Route table**.
339326
5. Select **Create**.
340-
7. Select the **FW-Hybrid-Test** for the resource group.
327+
7. Select the **RG-fw-hybrid-test** for the resource group.
341328
8. For **Region**, select the same location that you used previously.
342329
1. For the name, type **UDR-DG**.
343330
4. For **Propagate gateway route**, select **No**.
@@ -371,7 +358,7 @@ Create a virtual machine in the spoke virtual network, running IIS, with no publ
371358
1. From the Azure portal home page, select **Create a resource**.
372359
2. Under **Popular**, select **Windows Server 2016 Datacenter**.
373360
3. Enter these values for the virtual machine:
374-
- **Resource group** - Select **FW-Hybrid-Test**.
361+
- **Resource group** - Select **RG-fw-hybrid-test**.
375362
- **Virtual machine name**: *VM-Spoke-01*.
376363
- **Region** - Same region that you're used previously.
377364
- **User name**: \<type a user name\>.
@@ -392,7 +379,7 @@ Create a virtual machine in the spoke virtual network, running IIS, with no publ
392379

393380
```azurepowershell-interactive
394381
Set-AzVMExtension `
395-
-ResourceGroupName FW-Hybrid-Test `
382+
-ResourceGroupName RG-fw-hybrid-test `
396383
-ExtensionName IIS `
397384
-VMName VM-Spoke-01 `
398385
-Publisher Microsoft.Compute `
@@ -409,7 +396,7 @@ This is a virtual machine that you use to connect using Remote Desktop to the pu
409396
1. From the Azure portal home page, select **Create a resource**.
410397
2. Under **Popular**, select **Windows Server 2016 Datacenter**.
411398
3. Enter these values for the virtual machine:
412-
- **Resource group** - Select existing, and then select **FW-Hybrid-Test**.
399+
- **Resource group** - Select existing, and then select **RG-fw-hybrid-test**.
413400
- **Virtual machine name** - *VM-Onprem*.
414401
- **Region** - Same region that you're used previously.
415402
- **User name**: \<type a user name\>.
@@ -459,7 +446,7 @@ Close any existing remote desktops before testing the changed rules. Now run the
459446

460447
## Clean up resources
461448

462-
You can keep your firewall resources for further testing, or if no longer needed, delete the **FW-Hybrid-Test** resource group to delete all firewall-related resources.
449+
You can keep your firewall resources for further testing, or if no longer needed, delete the **RG-fw-hybrid-test** resource group to delete all firewall-related resources.
463450

464451
## Next steps
465452

0 commit comments

Comments
 (0)