You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/load-balancer/tutorial-create-gateway-load-balancer.md
+92-24Lines changed: 92 additions & 24 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -56,15 +56,13 @@ If you choose to install and use PowerShell locally, this article requires the A
56
56
57
57
## Create a virtual network and associated resources
58
58
59
-
In this section, you create a virtual network and associated resources. Along with the virtual network, you create a bastion host and a network security group.
An Azure resource group is a logical container into which Azure resources are deployed and managed.
70
68
@@ -77,12 +75,10 @@ Create a resource group with [az group create](/cli/azure/group#az-group-create)
77
75
78
76
```
79
77
80
-
## Configure virtual network
78
+
## Create virtual network
81
79
82
80
A virtual network is needed for the resources that are in the backend pool of the gateway load balancer.
83
81
84
-
### Create virtual network
85
-
86
82
Use [az network vnet create](/cli/azure/network/vnet#az-network-vnet-create) to create the virtual network.
87
83
88
84
```azurecli-interactive
@@ -95,7 +91,7 @@ Use [az network vnet create](/cli/azure/network/vnet#az-network-vnet-create) to
95
91
--subnet-prefixes 10.1.0.0/24
96
92
```
97
93
98
-
###Create bastion public IP address
94
+
## Create bastion public IP address
99
95
100
96
Use [az network public-ip create](/cli/azure/network/public-ip#az-network-public-ip-create) to create a public IP address for the Azure Bastion host
101
97
@@ -107,7 +103,7 @@ az network public-ip create \
107
103
--zone 1 2 3
108
104
```
109
105
110
-
###Create bastion subnet
106
+
## Create bastion subnet
111
107
112
108
Use [az network vnet subnet create](/cli/azure/network/vnet/subnet#az-network-vnet-subnet-create) to create the bastion subnet.
113
109
@@ -119,7 +115,7 @@ az network vnet subnet create \
119
115
--address-prefixes 10.1.1.0/27
120
116
```
121
117
122
-
###Create bastion host
118
+
## Create bastion host
123
119
124
120
Use [az network bastion create](/cli/azure/network/bastion#az-network-bastion-create) to deploy a bastion host for secure management of resources in virtual network.
125
121
@@ -140,11 +136,9 @@ It can take a few minutes for the Azure Bastion host to deploy.
140
136
141
137
>
142
138
143
-
## Configure NSG
144
-
145
-
Use the following example to create a network security group. You'll configure the NSG rules needed for network traffic in the virtual network created previously.
139
+
## Create NSG
146
140
147
-
### Create NSG
141
+
Use the following example to create a network security group. You'll configure the NSG rules needed for network traffic in the virtual network created previou
148
142
149
143
Use [az network nsg create](/cli/azure/network/nsg#az-network-nsg-create) to create the NSG.
150
144
@@ -154,7 +148,7 @@ Use [az network nsg create](/cli/azure/network/nsg#az-network-nsg-create) to cre
154
148
--name myNSG
155
149
```
156
150
157
-
###Create NSG Rules
151
+
## Create NSG Rules
158
152
159
153
Use [az network nsg rule create](/cli/azure/network/nsg/rule#az-network-nsg-rule-create) to create rules for the NSG.
In this section, you create a gateway load balancer and configure it with a backend pool and frontend IP configuration. The backend pool is associated with the existing load balancer created in the prerequisites.
308
301
309
302
# [Azure portal](#tab/azureportal)
310
303
311
-
# [Azure CLI](#tab/azurecli/)
304
+
In this section, you create the configuration and deploy the gateway load balancer.
305
+
306
+
1. In the search box at the top of the portal, enter **Load balancer**. Select **Load balancers** in the search results.
307
+
308
+
1. In the **Load Balancer** page, select **Create**.
309
+
310
+
1. In the **Basics** tab of the **Create load balancer** page, enter, or select the following information:
311
+
312
+
|**Setting**|**Value**|
313
+
| --- | --- |
314
+
|**Project details**||
315
+
| Subscription | Select your subscription. |
316
+
| Resource group | Select **load-balancer-rg**. |
317
+
|**Instance details**||
318
+
| Name | Enter **gateway-load-balancer**|
319
+
| Region | Select **(US) East US**. |
320
+
| SKU | Select **Gateway**. |
321
+
| Type | Select **Internal**. |
322
+
323
+
:::image type="content" source="./media/tutorial-gateway-portal/create-load-balancer.png" alt-text="Screenshot of create standard load balancer basics tab." border="true":::
324
+
325
+
1. Select **Next: Frontend IP configuration** at the bottom of the page.
326
+
327
+
1. In **Frontend IP configuration**, select **+ Add a frontend IP**.
328
+
1. In **Add frontend IP configuration**, enter or select the following information:
329
+
330
+
|**Setting**|**Value**|
331
+
| ------- | ----- |
332
+
| Name | Enter **lb-frontend-IP**. |
333
+
| Virtual network | Select **lb-vnet**. |
334
+
| Subnet | Select **backend-subnet**. |
335
+
| Assignment | Select **Dynamic**|
336
+
337
+
1. Select **Save**.
312
338
313
-
## Configure Gateway Load Balancer
339
+
1. Select **Next: Backend pools** at the bottom of the page.
314
340
315
-
In this section, you'll create the configuration and deploy the gateway load balancer.
341
+
1. In the **Backend pools** tab, select **+ Add a backend pool**.
316
342
317
-
### Create Gateway Load Balancer
343
+
5. In **Add backend pool**, enter or select the following information.
344
+
345
+
|**Setting**|**Value**|
346
+
| ------- | ----- |
347
+
| Name | Enter **lb-backend-pool**. |
348
+
| Backend Pool Configuration | Select **NIC**. |
349
+
|**Gateway load balancer configuration**||
350
+
| Type | Select **Internal and External**. |
351
+
| Internal port | Leave the default of **10800**. |
352
+
| Internal identifier | Leave the default of **800**. |
353
+
| External port | Leave the default of **10801**. |
354
+
| External identifier | Leave the default of **801**. |
355
+
356
+
6. Select **Save**.
357
+
358
+
7. Select the **Next: Inbound rules** button at the bottom of the page.
359
+
360
+
8. In **Load balancing rule** in the **Inbound rules** tab, select **+ Add a load balancing rule**.
361
+
362
+
9. In **Add load balancing rule**, enter or select the following information:
363
+
364
+
|**Setting**|**Value**|
365
+
| ------- | ----- |
366
+
| Name | Enter **lb-rule**|
367
+
| IP Version | Select **IPv4** or **IPv6** depending on your requirements. |
368
+
| Frontend IP address | Select **lb-frontend-IP**. |
369
+
| Backend pool | Select **lb-backend-pool**. |
370
+
| Health probe | Select **Create new**. </br> In **Name**, enter **lb-health-probe**. </br> Select **TCP** in **Protocol**. </br> Leave the rest of the defaults, and select **Save**. |
371
+
| Session persistence | Select **None**. |
372
+
| Enable TCP reset | Leave default of unchecked. |
373
+
| Enable floating IP | Leave default of unchecked. |
374
+
375
+
:::image type="content" source="./media/tutorial-gateway-portal/add-load-balancing-rule.png" alt-text="Screenshot of create load-balancing rule." border="true":::
376
+
377
+
10. Select **Save**.
378
+
379
+
11. Select the blue **Review + create** button at the bottom of the page.
380
+
381
+
12. Select **Create**.
382
+
383
+
# [Azure CLI](#tab/azurecli/)
384
+
385
+
In this section, you create a gateway load balancer and configure it with a backend pool and frontend IP configuration. The backend pool is associated with the existing load balancer created in the prerequisites.
386
+
387
+
## Create Gateway Load Balancer
318
388
319
389
To create the load balancer, use [az network lb create](/cli/azure/network/lb#az-network-lb-create).
320
390
@@ -329,7 +399,7 @@ To create the load balancer, use [az network lb create](/cli/azure/network/lb#az
329
399
--frontend-ip-name myFrontEnd
330
400
```
331
401
332
-
###Create tunnel interface
402
+
## Create tunnel interface
333
403
334
404
An internal interface is automatically created with Azure CLI with the **`--identifier`** of **900** and **`--port`** of **10800**.
A health probe is required to monitor the health of the backend instances in the load balancer. Use [az network lb probe create](/cli/azure/network/lb/probe#az-network-lb-probe-create) to create the health probe.
351
421
352
422
```azurecli-interactive
@@ -362,7 +432,7 @@ A health probe is required to monitor the health of the backend instances in the
362
432
363
433
```
364
434
365
-
###Create load-balancing rule
435
+
## Create load-balancing rule
366
436
367
437
Traffic destined for the backend instances is routed with a load-balancing rule. Use [az network lb rule create](/cli/azure/network/lb/probe#az-network-lb-rule-create) to create the load-balancing rule.
When you no longer need the resources created in this tutorial, delete the resource group. This also deletes the virtual network and all other resources in the resource group.
722
-
723
791
# [Azure portal](#tab/azureportal)
724
792
725
793
When no longer needed, delete the resource group, load balancer, and all related resources. To do so, select the resource group **load-balancer-rg** that contains the resources and then select **Delete**.
0 commit comments