You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
#Customer intent: As an IT administrator, I want to use the Azure portal to set up an application gateway with Web Application Firewall so I can protect my applications.
@@ -39,9 +39,9 @@ Sign in to the [Azure portal](https://portal.azure.com).
39
39
40
40
## Create an application gateway
41
41
42
-
1. Select **Create a resource** on the left menu of the Azure portal. The **New** window appears.
42
+
1. Select **Create a resource** on the left menu of the Azure portal. The **Create a resource** window appears.
43
43
44
-
2. Select **Networking** and then select **Application Gateway** in the **Featured** list.
44
+
2. Select **Networking** and then select **Application Gateway** in the **Popular Azure services** list.
45
45
46
46
### Basics tab
47
47
@@ -55,21 +55,20 @@ Sign in to the [Azure portal](https://portal.azure.com).
55
55
56
56
:::image type="content" source="../media/application-gateway-web-application-firewall-portal/application-gateway-create-basics.png" alt-text="Screenshot of Create new application gateway: Basics tab." lightbox="../media/application-gateway-web-application-firewall-portal/application-gateway-create-basics.png":::
57
57
58
-
2. For Azure to communicate between the resources that you create, it needs a virtual network. You can either create a new virtual network or use an existing one. In this example, you'll create a new virtual network at the same time that you create the application gateway. Application Gateway instances are created in separate subnets. You create two subnets in this example: one for the application gateway, and another for the backend servers.
58
+
2. For Azure to communicate between the resources that you create, it needs a virtual network. You can either create a new virtual network or use an existing one. In this example, you'll create a new virtual network at the same time that you create the application gateway. Application Gateway instances are created in separate subnets. You create two subnets in this example: one for the application gateway, and then later add another for the backend servers.
59
59
60
-
Under **Configure virtual network**, select **Create new** to create a new virtual network. In the **Create virtual network** window that opens, enter the following values to create the virtual network and two subnets:
60
+
Under **Configure virtual network**, select **Create new** to create a new virtual network. In the **Create virtual network** window that opens, enter the following values to create the virtual network and a subnet:
61
61
62
-
-**Name**: Enter *myVNet* for the name of the virtual network.
63
62
64
-
-**Subnet name** (Application Gateway subnet): The **Subnets** grid will show a subnet named *Default*. Change the name of this subnet to *myAGSubnet*.<br>The application gateway subnet can contain only application gateways. No other resources are allowed.
65
63
66
-
-**Subnet name** (backend server subnet): In the second row of the **Subnets** grid, enter *myBackendSubnet* in the **Subnet name** column.
64
+
-**Name**: Enter *myVNet* for the name of the virtual network.
65
+
-**Address space** : Accept the **10.0.0.0/16** address range.
67
66
68
-
-**Address range** (backend server subnet): In the second row of the **Subnets**Grid, enter an address range that doesn't overlap with the address range of*myAGSubnet*. For example, if the address range of *myAGSubnet* is 10.21.0.0/24, enter *10.21.1.0/24* for the address range of *myBackendSubnet*.
67
+
-**Subnet name** (Application Gateway subnet): The **Subnets**area shows a subnet named *Default*. Change the name of this subnet to*myAGSubnet*, and leave the default IPv4 Adddress range of **10.0.0.0/24**.<br>The application gateway subnet can contain only application gateways. No other resources are allowed.
69
68
70
-
Select **OK** to close the **Create virtual network** window and save the virtual network settings.
69
+
Select **OK** to close the **Create virtual network** window and save the virtual network settings.
71
70
72
-
:::image type="content" source="../media/application-gateway-web-application-firewall-portal/application-gateway-create-vnet.png" alt-text="Screenshot of Create new application gateway: Create virtual network.":::
71
+
:::image type="content" source="../media/application-gateway-web-application-firewall-portal/application-gateway-create-vnet.png" alt-text="Screenshot of Create new application gateway: Create virtual network.":::
73
72
74
73
3. On the **Basics** tab, accept the default values for the other settings and then select **Next: Frontends**.
75
74
@@ -114,7 +113,7 @@ On the **Configuration** tab, you'll connect the frontend and backend pool you c
114
113
3. A routing rule requires a listener. On the **Listener** tab within the **Add a routing rule** window, enter the following values for the listener:
115
114
116
115
-**Listener name**: Enter *myListener* for the name of the listener.
117
-
-**Frontend IP**: Select **Public** to choose the public IP you created for the frontend.
116
+
-**Frontend IP Protocol**: Select **Public IPv4** to choose the public IP you created for the frontend.
118
117
119
118
Accept the default values for the other settings on the **Listener** tab, then select the **Backend targets** tab to configure the rest of the routing rule.
120
119
@@ -138,6 +137,15 @@ Review the settings on the **Review + create** tab, and then select **Create** t
138
137
139
138
Wait until the deployment finishes successfully before moving on to the next section.
140
139
140
+
## Add the backend server subnet
141
+
142
+
1. Open the myVNet virtual network.
143
+
1. Under **Settings**, select **Subnets**.
144
+
1. Select **+ Subnet**.
145
+
1. For **Name**, type **myBackendSubnet**.
146
+
1. For **Starting address**, type **10.0.1.0**.
147
+
1. Select **Add** to add the subnet.
148
+
141
149
## Add backend targets
142
150
143
151
In this example, you'll use virtual machines as the target backend. You can either use existing virtual machines or create new ones. You'll create two virtual machines that Azure uses as backend servers for the application gateway.
@@ -177,6 +185,9 @@ In this example, you install NGINX on the virtual machines only to verify Azure
177
185
1. Open a Bash Cloud Shell. To do so, select the **Cloud Shell** icon from the top navigation bar of the Azure portal and then select **Bash** from the drop-down list.
178
186
179
187
:::image type="content" source="../media/application-gateway-web-application-firewall-portal/bash-shell.png" alt-text="Screenshot showing the Bash Cloud Shell.":::
188
+
1. Ensure your bash session is set for your suscription:
189
+
190
+
`account set --subscription "<your subscription name>"`
180
191
181
192
2. Run the following command to install NGINX on the virtual machine:
0 commit comments