You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/firewall-manager/secure-cloud-network.md
+26-26Lines changed: 26 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,18 +42,18 @@ The two virtual networks will each have a workload server in them and will be pr
42
42
43
43
1. From the Azure portal home page, select **Create a resource**.
44
44
2. Search for **Virtual network**, and select **Create**.
45
-
2. For **Subscription**, select your subscription.
46
-
1. For **Resource group**, select **Create new**, and type **fw-manager-rg** for the name and select **OK**.
47
-
2. For **Name**, type **Spoke-01**.
48
-
3. For **Region**, select **(US) East US**.
49
-
4. Select **Next: IP Addresses**.
50
-
1. For **Address space**, type **10.0.0.0/16**.
51
-
1. Select **Add subnet**.
52
-
1. For **Subnet name**, type **Workload-01-SN**.
53
-
1. For **Subnet address range**, type **10.0.1.0/24**.
54
-
1. Select **Add**.
55
-
1. Select **Review + create**.
56
-
1. Select **Create**.
45
+
3. For **Subscription**, select your subscription.
46
+
4. For **Resource group**, select **Create new**, and type **fw-manager-rg** for the name and select **OK**.
47
+
5. For **Name**, type **Spoke-01**.
48
+
6. For **Region**, select **(US) East US**.
49
+
7. Select **Next: IP Addresses**.
50
+
8. For **Address space**, type **10.0.0.0/16**.
51
+
9. Select **Add subnet**.
52
+
10. For **Subnet name**, type **Workload-01-SN**.
53
+
11. For **Subnet address range**, type **10.0.1.0/24**.
54
+
12. Select **Add**.
55
+
13. Select **Review + create**.
56
+
14. Select **Create**.
57
57
58
58
Repeat this procedure to create another similar virtual network:
59
59
@@ -71,7 +71,7 @@ Create your secured virtual hub using Firewall Manager.
71
71
3. On the **Firewall Manager** page under **Deployments**, select **Virtual hubs**.
72
72
4. On the **Firewall Manager | Virtual hubs** page, select **Create new secured virtual hub**.
73
73
74
-
:::image type="content" source="./media/secure-cloud-network/1-create-new-secured-virtual-hub.png" alt-text="Create new secured virtual hub." lightbox="./media/secure-cloud-network/1-create-new-secured-virtual-hub.png":::
74
+
:::image type="content" source="./media/secure-cloud-network/1-create-new-secured-virtual-hub.png" alt-text="Create new secured virtual hub." lightbox="./media/secure-cloud-network/1-create-new-secured-virtual-hub.png":::
75
75
76
76
5. For **Resource group**, select **fw-manager-rg**.
77
77
6. For **Region**, select **East US**.
@@ -81,7 +81,7 @@ Create your secured virtual hub using Firewall Manager.
81
81
10. Select **New vWAN** and select **Standard** for "Type"
82
82
11. Leave the **Include VPN gateway to enable Trusted Security Partners** check box cleared.
83
83
84
-
:::image type="content" source="./media/secure-cloud-network/2-create-new-secured-virtual-hub.png" alt-text="Create new virtual hub with properties." lightbox="./media/secure-cloud-network/2-create-new-secured-virtual-hub.png":::
84
+
:::image type="content" source="./media/secure-cloud-network/2-create-new-secured-virtual-hub.png" alt-text="Create new virtual hub with properties." lightbox="./media/secure-cloud-network/2-create-new-secured-virtual-hub.png":::
85
85
86
86
12. Select **Next: Azure Firewall**.
87
87
13. Accept the default **Azure Firewall****Enabled** setting.
@@ -91,17 +91,17 @@ Create your secured virtual hub using Firewall Manager.
91
91
> [!IMPORTANT]
92
92
> Virtual WAN is a collection of hubs and services made available inside the hub. The user can have as many Virtual WAN per their need. In a Virtual WAN hub, there are multiple services like VPN, ExpressRoute etc. Each of these services is automatically deployed across Availability Zones except Azure Firewall, if the region supports Availability Zones. To align with Azure Virtual WAN resiliency, it is recommended to select all available Availability Zones, where available.
16. Select the **Firewall Policy** to apply at the new Azure Firewall instance. Select **Default Deny Policy**, you will refine your settings later in this article.
18. Accept the default **Trusted Security Partner****Disabled** setting, and select **Next: Review + create**.
102
102
19. Select **Create**.
103
103
104
-
:::image type="content" source="./media/secure-cloud-network/5-confirm-and-create.png" alt-text="Create the Firewall instance." lightbox="./media/secure-cloud-network/5-confirm-and-create.png":::
104
+
:::image type="content" source="./media/secure-cloud-network/5-confirm-and-create.png" alt-text="Create the Firewall instance." lightbox="./media/secure-cloud-network/5-confirm-and-create.png":::
105
105
106
106
> [!NOTE]
107
107
> Creating a secured virtual hub may take up to 30 minutes.
@@ -111,8 +111,8 @@ You can get the firewall public IP address after the deployment completes.
111
111
1. Open **Firewall Manager**.
112
112
2. Select **Virtual hubs**.
113
113
3. Select **hub-01**.
114
-
7. Select **Public IP configuration**.
115
-
8. Note the public IP address to use later.
114
+
4. Select **Public IP configuration**.
115
+
5. Note the public IP address to use later.
116
116
117
117
### Connect the hub and spoke virtual networks
118
118
@@ -144,13 +144,13 @@ Repeat to connect the **Spoke-02** virtual network: connection name - **hub-spok
144
144
|Password |type a password|
145
145
146
146
4. Under **Inbound port rules**, for **Public inbound ports**, select **None**.
147
-
6. Accept the other defaults and select **Next: Disks**.
148
-
7. Accept the disk defaults and select **Next: Networking**.
149
-
8. Select **Spoke-01** for the virtual network and select **Workload-01-SN** for the subnet.
150
-
9. For **Public IP**, select **None**.
151
-
11. Accept the other defaults and select **Next: Management**.
152
-
12. Select **Disable** to disable boot diagnostics. Accept the other defaults and select **Review + create**.
153
-
13. Review the settings on the summary page, and then select **Create**.
147
+
5. Accept the other defaults and select **Next: Disks**.
148
+
6. Accept the disk defaults and select **Next: Networking**.
149
+
7. Select **Spoke-01** for the virtual network and select **Workload-01-SN** for the subnet.
150
+
8. For **Public IP**, select **None**.
151
+
9. Accept the other defaults and select **Next: Management**.
152
+
10. Select **Disable** to disable boot diagnostics. Accept the other defaults and select **Review + create**.
153
+
11. Review the settings on the summary page, and then select **Create**.
154
154
155
155
Use the information in the following table to configure another virtual machine named **Srv-Workload-02**. The rest of the configuration is the same as the **Srv-workload-01** virtual machine.
0 commit comments