Freshness15

Author: dagiro

articles/devtest-labs/enable-browser-connection-lab-virtual-machines.md

@@ -2,61 +2,79 @@
 title: Enable browser connection on Azure DevTest Labs virtual machines
 description: DevTest Labs now integrates with Azure Bastion, as an owner of the lab you can enable accessing all lab virtual machines through a browser.  
 ms.topic: how-to
-ms.date: 06/26/2020
+ms.date: 10/28/2021
 ---
 
 # Enable browser connection on Azure DevTest Labs virtual machines 
-DevTest Labs integrates with [Azure Bastion](../bastion/index.yml), which enables you to connect to your virtual machines through a browser. You first need to enable browser connection on lab virtual machines.
 
-As an owner of a lab you can enable accessing all lab virtual machines through a browser. You don't need an additional client, agent, or piece of software. Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly in the Azure portal over TLS. When you connect via Azure Bastion, your virtual machines don't need a public IP address. For more information, see [What is Azure Bastion?](../bastion/bastion-overview.md)
+DevTest Labs integrates with [Azure Bastion](../bastion/index.yml), which enables you to connect to your virtual machines through a browser. You first need to enable browser connections to lab virtual machines.
 
+As an owner of a lab, you can enable accessing all lab virtual machines through a browser. You don't need another client, agent, or piece of software. Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly in the Azure portal over TLS. When you connect via Azure Bastion, your virtual machines don't need a public IP address. For more information, see [What is Azure Bastion?](../bastion/bastion-overview.md)
 
-This article shows how to enable browser connection on lab virtual machines.
+In this guide, you'll enable browser connections to lab virtual machines.
 
-## Prerequisites 
-- Either deploy a Bastion host in your existing lab's virtual network **(OR)** connect your lab with a Bastion configured virtual network.
-To learn how to deploy a Bastion host in a virtual network, see  [Create an Azure Bastion host](../bastion/tutorial-create-host-portal.md). When creating the Bastion host, select the lab's virtual network. 
-- Lab user needs to have a **Reader** role on the Bastion host and the virtual network that has the Bastion configured. 
+## Prerequisites
 
-## Create a second sub net in the Bastion virtual network
-First, you need to create a second subnet in the Bastion virtual network because the AzureBastionSubnet doesn't allow creation of non-Bastion resources in it. 
-Create another subnet within the Bastion virtual network as shown in the following image:
+- A lab in [Azure DevTest Labs](./devtest-lab-overview.md)
 
-![Second subnet in Azure Bastion virtual network](./media/connect-virtual-machine-through-browser/second-subnet.png)
+- A virtual network configured with Bastion.
+    - If you don't have a virtual network, see [Create a virtual network](../virtual-network/quick-create-portal#create-a-virtual-network). The article includes steps to configure Bastion as part of the virtual network creation.
+    - If you already have a virtual network, see [Create an Azure Bastion host](../bastion/tutorial-create-host-portal.md) for steps on adding Bastion.
 
-## Enable VM creation in the subnet
-Now, enable the creation of VMs in this subnet by following these steps: 
+- The lab user needs to be a member of the **Reader** role on the Bastion host and the virtual network that has Bastion configured. 
+
+## Add virtual network to lab
 
 1. Sign in to the [Azure portal](https://portal.azure.com).
-1. Select **All Services** on the left navigational menu. 
-1. Select **DevTest Labs** from the list. 
-1. From the list of labs, select *your lab*. 
-
-    > [!NOTE]
-    > Azure Bastion is now generally available in the following regions: West US, East US, West Europe, South Central US, Australia East, and Japan East. So, create a lab in one of these regions if your lab isn't in one of them. 
-    
-1. Select **Configuration and policies** in the **Settings** section on the left menu. 
-1. Select **Virtual networks**.
-1. Select **Add** from the toolbar. 
-1. Select the **virtual network** that has the Bastion host deployed. 
-1. Select the subnet for VMs, not the **AzureBastionSubnet**, the other one you created earlier. Close the page and reopen it if you don't see the subnet in the list at the bottom. 
-
-    ![Enable VM creation in the subnet](./media/connect-virtual-machine-through-browser/enable-vm-creation-subnet.png)
-1. Select **Use in virtual machine creation** option. 
-1. Select **Save** on the toolbar. 
-1. If you have an old virtual network for the lab, remove it by selecting **...*  and **Remove**. 
+
+1. Navigate to your lab in **DevTest Labs**.
+
+1. Under **Settings**, select **Configuration and policies**.
+
+    :::image type="content" source="./media/enable-browser-connection-lab-virtual-machines/portal-lab-configurations-policies.png" alt-text="Screenshot of configurations and policies.":::
+
+1. On the **Configuration and policies** page, under **External resources**, select **Virtual networks**.
+
+1. On the **Virtual networks** section, select **+ Add**.
+
+    :::image type="content" source="./media/enable-browser-connection-lab-virtual-machines/virtual-network-add.png" alt-text="Screenshot of add virtual network.":::
+
+1. On the **Virtual network** page, select **[Select virtual network]**.
+
+    :::image type="content" source="./media/enable-browser-connection-lab-virtual-machines/select-virtual-network-button.png" alt-text="Screenshot of select virtual network button.":::
+
+1. On the **Choose virtual network** page, select the virtual network configured with Bastion. You'll then be returned to the **Virtual network** page
+
+1. Select **Save**. You'll then be returned to the **Virtual networks** section of **Configuration and policies**.
+
+## Allow subnet use in VM Creation
+
+These steps continue immediately from the prior section.
+
+1. Select your virtual network.
+
+    :::image type="content" source="./media/enable-browser-connection-lab-virtual-machines/virtual-network-added.png" alt-text="Screenshot of added virtual network.":::
+
+1. On the **Virtual network** page, select the subnet for VMs, not **AzureBastionSubnet**.
+
+1. On the **Lab Subnet** section, for the **Use in virtual machine creation** option, select **Yes**. Then select **Save**.
+
+    :::image type="content" source="./media/enable-browser-connection-lab-virtual-machines/allow-subnet-use.png" alt-text="Screenshot of selection for allow subnet use option.":::
+
+1. On the **Virtual network** page, select **Save**. You'll then be returned to the **Virtual networks** section of **Configuration and policies**.
 
 ## Enable browser connection 
 
-Once you have a Bastion configured virtual network inside the lab, as a lab owner, you can enable browser connect on lab virtual machines.
+Once you have a Bastion configured virtual network inside the lab, as a lab owner, you can enable browser connect to lab virtual machines.
 
-To enable browser connect on lab virtual machines, follow these steps:
+These steps continue immediately from the prior section.
 
-1. In the Azure portal, navigate to *your lab*.
-1. Select **Configuration and policies**.
-1. In **Settings**, select **Browser connect**. If you don't see this option, close the **Configuration policies** page, and reopen it. 
+1. Under **Settings**, select **Browser connect**.
 
-    ![Enable browser connection](./media/enable-browser-connection-lab-virtual-machines/browser-connect.png)
+1. Under the **Browser access to virtual machines** section, select **Yes** for **Browser connect**. Then select **Save**.
+
+    :::image type="content" source="./media/enable-browser-connection-lab-virtual-machines/enable-browser-connect.png" alt-text="Screenshot of enabling browser connect option.":::
 
 ## Next Steps
+
 See the following article to learn how to connect to your VMs using a browser: [Connect to your virtual machines through a browser](connect-virtual-machine-through-browser.md)