Merge pull request #195067 from cherylmc/bastion1

portal updates

Author: v-ccolin

articles/bastion/media/tutorial-create-host-portal/configure-manually.png

@@ -1,16 +1,16 @@
 ---
-title: 'Tutorial: Deploy Bastion: Azure portal'
+title: 'Tutorial: Deploy Bastion using manual settings: Azure portal'
 description: Learn how to deploy Bastion using manual settings using the Azure portal.
 services: bastion
 author: cherylmc
 ms.service: bastion
 ms.topic: tutorial
-ms.date: 03/14/2022
+ms.date: 04/13/2022
 ms.author: cherylmc
 ms.custom: ignite-fall-2021
 ---
 
-# Tutorial: Deploy Bastion using the Azure portal
+# Tutorial: Deploy Bastion using manual settings
 
 This tutorial helps you deploy Azure Bastion from the Azure portal using manual settings. When you use manual settings, you can specify configuration values such as instance counts and the SKU at the time of deployment. After Bastion is deployed, you can connect (SSH/RDP) to virtual machines in the virtual network via Bastion using the private IP address of the VM. When you connect to a VM, it doesn't need a public IP address, client software, agent, or a special configuration.
 
@@ -85,70 +85,50 @@ You can use the following example values when creating this configuration, or yo
 This section helps you deploy Bastion to your VNet. Once Bastion is deployed, you can connect securely to any VM in the VNet using its private IP address.
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
-1. Type **Bastion** in the search.
-1. Under services, select **Bastions**.
-1. On the Bastions page, select **+ Create** to open the **Create a Bastion** page.
-1. On the **Create a Bastion** page, configure the required settings.
 
-   :::image type="content" source="./media/tutorial-create-host-portal/review-create.png" alt-text="Screenshot of Create a Bastion portal page." lightbox="./media/tutorial-create-host-portal/review-create.png":::
+1. Go to your VNet.
 
-### Project details
+1. Click **Bastion** in the left pane to open the **Bastion** page.
 
-* **Subscription**: Select your Azure subscription.
+1. On the Bastion page, click **Configure manually**. This lets you configure specific additional settings before deploying Bastion to your VNet.
+   :::image type="content" source="./media/tutorial-create-host-portal/configure-manually.png" alt-text="Screenshot of Bastion page showing configure manually button." lightbox="./media/tutorial-create-host-portal/configure-manually.png":::
 
-* **Resource Group**: Select your Resource Group.
+1. On the **Create a Bastion** page, configure the settings for your bastion host. Project details are populated from your virtual network values. Configure the **Instance details** values.
 
-### Instance details
+   * **Name**: Type the name that you want to use for your bastion resource.
 
-* **Name**: Type the name that you want to use for your bastion resource.
+   * **Region**: The Azure public region in which the resource will be created. Choose the region in which your virtual network resides.
 
-* **Region**: The Azure public region in which the resource will be created. Choose the region in which your virtual network resides.
+   * **Tier:** The tier is also known as the **SKU**. For this tutorial, select **Standard**. The Standard SKU lets you configure the instance count for host scaling and other features. For more information about features that require the Standard SKU, see [Configuration settings - SKU](configuration-settings.md#skus).
 
-* **Tier:** The tier is also known as the **SKU**. For this tutorial, select **Standard**. The Standard SKU lets you configure the instance count for host scaling and other features. For more information about features that require the Standard SKU, see [Configuration settings - SKU](configuration-settings.md#skus).
+   * **Instance count:** This is the setting for **host scaling**. It's configured in scale unit increments. Use the slider or type a number to configure the instance count that you want. For this tutorial, you can select the instance count you'd prefer. For more information, see [Host scaling](configuration-settings.md#instance) and [Pricing](https://azure.microsoft.com/pricing/details/azure-bastion).
 
-* **Instance count:** This is the setting for **host scaling**. It's configured in scale unit increments. Use the slider or type a number to configure the instance count that you want. For this tutorial, you can select the instance count you'd prefer. For more information, see [Host scaling](configuration-settings.md#instance) and [Pricing](https://azure.microsoft.com/pricing/details/azure-bastion).
+   :::image type="content" source="./media/tutorial-create-host-portal/instance-values.png" alt-text="Screenshot of Bastion page instance values." lightbox="./media/tutorial-create-host-portal/instance-values.png":::
 
-### Configure virtual networks
+1. Configure the **virtual networks** settings. Select the VNet from the dropdown. If you don't see your VNet in the dropdown list, make sure you selected the correct Resource Group and Region in the previous settings on this page.
 
-* **Virtual network**: Select your virtual network. If you don't see your VNet in the dropdown list, make sure you selected the correct Resource Group and Region in the previous settings on this page.
+1. To configure the AzureBastionSubnet, click **Manage subnet configuration**.
 
-* **Subnet**: Once select a virtual network, the subnet field appears on the page. This is the subnet to which your Bastion instances will be deployed. In most cases, you won't already have the subnet **AzureBastionSubnet** configured. The subnet name must be **AzureBastionSubnet**. See the following steps to add the subnet.
+   :::image type="content" source="./media/tutorial-create-host-portal/select-vnet.png" alt-text="Screenshot of configure virtual networks section." lightbox="./media/tutorial-create-host-portal/select-vnet.png":::
 
-#### Manage subnet configuration
-
-To configure the bastion subnet:
-
-1. Select **Manage subnet configuration**. This takes you to the **Subnets** page.
-
-   :::image type="content" source="./media/tutorial-create-host-portal/subnet.png" alt-text="Screenshot of Manage subnet configuration." lightbox="./media/tutorial-create-host-portal/subnet.png":::
 1. On the **Subnets** page, select **+Subnet** to open the **Add subnet** page.
 
-1. Create a subnet using the following guidelines:
+1. On the **Add subnet page**, create the 'AzureBastionSubnet' subnet using the following values. Leave the other values as default.
 
-   * The subnet must be named **AzureBastionSubnet**.
+   * The subnet name must be **AzureBastionSubnet**.
    * The subnet must be at least **/26 or larger** (/26, /25, /24 etc.) to accommodate features available with the Standard SKU.
 
-1. You don't need to fill out additional fields on this page. Select **Save** at the bottom of the page to create the subnet.
+   Click **Save** at the bottom of the page to save your values.
 
-1. At the top of the **Subnets** page, select **Create a Bastion** to return to the Bastion configuration page.
+1. At the top of the **Subnets** page, click **Create a Bastion** to return to the Bastion configuration page.
 
    :::image type="content" source="./media/tutorial-create-host-portal/create-a-bastion.png" alt-text="Screenshot of Create a Bastion."lightbox="./media/tutorial-create-host-portal/create-a-bastion.png":::
 
-### Public IP address
-
-This is the public IP address of the Bastion host resource on which RDP/SSH will be accessed (over port 443). The public IP address must be in the same region as the Bastion resource you're creating. This IP address doesn't have anything to do with any of the VMs that you want to connect to.
-
-1. Select **Create new**.
-1. For **Public IP address name**, you can leave the default naming suggestion.
-1. For **Public IP address SKU**, this setting is prepopulated by default to **Standard**. Azure Bastion supports only the Standard public IP address SKU.
-1. For **Assignment**, this setting is prepopulated by default to **Static**. You can't change this setting.
+1. The public IP address section is where you configure the public IP address of the Bastion host resource on which RDP/SSH will be accessed (over port 443). The public IP address must be in the same region as the Bastion resource you're creating. This IP address doesn't have anything to do with any of the VMs that you want to connect to. Create a new IP address. You can leave the default naming suggestion.
 
-### Review and create
+1. When you finish specifying the settings, select **Review + Create**. This validates the values.
 
-1. When you finish specifying the settings, select **Review + Create**. This validates the values. Once validation passes, you can deploy Bastion.
-1. Review your settings.
-1. At the bottom of the page, select **Create**.
-1. You'll see a message letting you know that your deployment is underway. Status will display on this page as the resources are created. It takes about 10 minutes for the Bastion resource to be created and deployed.
+1. Once validation passes, you can deploy Bastion. Click **Create**.  You'll see a message letting you know that your deployment is process. Status will display on this page as the resources are created. It takes about 10 minutes for the Bastion resource to be created and deployed.
 
 ## <a name="connect"></a>Connect to a VM
 

articles/bastion/media/tutorial-create-host-portal/create-a-bastion.png

@@ -7,20 +7,20 @@ ms.topic: include
 
 ---
 
-When you connect to a VM using Azure Bastion, you do not need a public IP address for your VM. If you aren't using the public IP address for anything else, you can disassociate it from your VM. To disassociate a public IP address from your VM, use the following steps:
+When you connect to a VM using Azure Bastion, you don't need a public IP address for your VM. If you aren't using the public IP address for anything else, you can disassociate it from your VM. To disassociate a public IP address from your VM, use the following steps:
 
 1. Go to your virtual machine and select **Networking**. Select the **NIC Public IP** to open the public IP address page.
 
-   :::image type="content" source="./media/bastion-remove-ip/networking.png" alt-text="Screenshot of networking page.":::
+   :::image type="content" source="./media/bastion-remove-ip/networking.png" alt-text="Screenshot of networking page." lightbox="./media/bastion-remove-ip/networking.png" :::
 
 1. On the **Public IP address** page for the VM, select **Disassociate**.
 
-   :::image type="content" source="./media/bastion-remove-ip/disassociate.png" alt-text="Screenshot of public IP address for the VM.":::
+   :::image type="content" source="./media/bastion-remove-ip/disassociate.png" alt-text="Screenshot of public IP address for the VM." lightbox="./media/bastion-remove-ip/disassociate.png":::
 
 1. Select **Yes** to disassociated the IP address from the network interface.
 
    :::image type="content" source="./media/bastion-remove-ip/disassociate-yes.png" alt-text="Screenshot of Disassociate public IP address.":::
 
 1. After you disassociate the IP address, you can delete the public IP address resource. To delete the public IP address resource, go to the resource group and locate the IP address resource you want to delete. Then, select **Delete** to delete the resource.
 
-   :::image type="content" source="./media/bastion-remove-ip/delete-resource.png" alt-text="Screenshot of delete the public IP address resource.":::
+   :::image type="content" source="./media/bastion-remove-ip/delete-resource.png" alt-text="Screenshot of delete the public IP address resource." lightbox="./media/bastion-remove-ip/delete-resource.png":::