Skip to content

Commit f4e10ea

Browse files
Update Create RT tutorial
- relatively minor edits - info for AVNM's udr mgmt at the end
1 parent 0cd15ba commit f4e10ea

File tree

1 file changed

+23
-23
lines changed

1 file changed

+23
-23
lines changed

articles/virtual-network/tutorial-create-route-table.md

Lines changed: 23 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ titlesuffix: Azure Virtual Network
44
description: In this tutorial, learn how to route network traffic with a route table.
55
author: asudbring
66
ms.service: azure-virtual-network
7-
ms.date: 10/31/2024
7+
ms.date: 07/11/2025
88
ms.author: allensu
99
ms.topic: tutorial
1010
ms.custom:
@@ -19,7 +19,7 @@ ai-usage: ai-assisted
1919

2020
# Tutorial: Route network traffic with a route table
2121

22-
Azure routes traffic between all subnets within a virtual network, by default. You can create your own routes to override Azure's default routing. Custom routes are helpful when, for example, you want to route traffic between subnets through a network virtual appliance (NVA).
22+
Azure routes traffic between all subnets within a virtual network by default. You can create your own routes to override Azure's default routing. Custom routes are helpful when, for example, you want to route traffic between subnets through a network virtual appliance (NVA).
2323

2424
:::image type="content" source="./media/tutorial-create-route-table-portal/resources-diagram.png" alt-text="Diagram of Azure resources created in tutorial." lightbox="./media/tutorial-create-route-table-portal/resources-diagram.png":::
2525

@@ -60,7 +60,7 @@ If you choose to install and use PowerShell locally, this article requires the A
6060

6161
## Create subnets
6262

63-
A **DMZ** and **Private** subnet are needed for this tutorial. The **DMZ** subnet is where you deploy the NVA, and the **Private** subnet is where you deploy the virtual machines that you want to route traffic to. The **subnet-1** is the subnet created in the previous steps. Use **subnet-1** for the public virtual machine.
63+
A **DMZ** and **Private** subnet are needed for this tutorial. The **DMZ** subnet is where you deploy the NVA and the **Private** subnet is where you deploy the private virtual machines you want to route traffic to. In the diagram, **subnet-1** is the **Public** subnet used for the public virtual machine.
6464

6565
### [Portal](#tab/portal)
6666

@@ -321,13 +321,13 @@ Network virtual appliances (NVAs) are virtual machines that help with network fu
321321

322322
### [PowerShell](#tab/powershell)
323323

324-
Create the VM with [New-AzVM](/powershell/module/az.compute/new-azvm). The following example creates a VM named *vm-nva*.
324+
Create the virtual machine with [New-AzVM](/powershell/module/az.compute/new-azvm). The following example creates a virtual machine named *vm-nva*.
325325

326326
```azurepowershell-interactive
327327
# Create a credential object
328328
$cred = Get-Credential
329329
330-
# Define the VM parameters
330+
# Define the virtual machine parameters
331331
$vmParams = @{
332332
ResourceGroupName = "test-rg"
333333
Location = "EastUS2"
@@ -340,13 +340,13 @@ $vmParams = @{
340340
PublicIpAddressName = $null # No public IP address
341341
}
342342
343-
# Create the VM
343+
# Create the virtual machine
344344
New-AzVM @vmParams
345345
```
346346

347347
### [CLI](#tab/cli)
348348

349-
Create a VM to be used as the NVA in the *subnet-dmz* subnet with [az vm create](/cli/azure/vm).
349+
Create a virtual machine to be used as the NVA in the *subnet-dmz* subnet with [az vm create](/cli/azure/vm).
350350

351351
```azurecli-interactive
352352
az vm create \
@@ -360,17 +360,17 @@ az vm create \
360360
--authentication-type password
361361
```
362362

363-
The VM takes a few minutes to create. Don't continue to the next step until Azure finishes creating the VM and returns output about the VM.
363+
The virtual machine takes a few minutes to create. Don't continue to the next step until Azure finishes creating the virtual machine and returns output for the virtual machine.
364364

365365
---
366366

367367
## Create public and private virtual machines
368368

369-
Create two virtual machines in the **vnet-1** virtual network. One virtual machine is in the **subnet-1** subnet, and the other virtual machine is in the **subnet-private** subnet. Use the same virtual machine image for both virtual machines.
369+
Create two virtual machines in the **vnet-1** virtual network. One virtual machine is in the **subnet-1** subnet and the other virtual machine is in the **subnet-private** subnet. Use the same virtual machine image for both virtual machines.
370370

371371
### Create public virtual machine
372372

373-
The public virtual machine is used to simulate a machine in the public internet. The public and private virtual machine are used to test the routing of network traffic through the NVA virtual machine.
373+
The public virtual machine is used to simulate a machine in the public internet. The public and private virtual machines are used to test the routing of network traffic through the NVA virtual machine.
374374

375375
### [Portal](#tab/portal)
376376

@@ -464,13 +464,13 @@ The public virtual machine is used to simulate a machine in the public internet.
464464

465465
### [PowerShell](#tab/powershell)
466466

467-
Create a VM in the *subnet-1* subnet with [New-AzVM](/powershell/module/az.compute/new-azvm). The following example creates a VM named *vm-public* in the *subnet-public* subnet of the *vnet-1* virtual network.
467+
Create a virtual machine in the *subnet-1* subnet with [New-AzVM](/powershell/module/az.compute/new-azvm). The following example creates a virtual machine named *vm-public* in the *subnet-public* subnet of the *vnet-1* virtual network.
468468

469469
```azurepowershell-interactive
470470
# Create a credential object
471471
$cred = Get-Credential
472472
473-
# Define the VM parameters
473+
# Define the virtual machine parameters
474474
$vmParams = @{
475475
ResourceGroupName = "test-rg"
476476
Location = "EastUS2"
@@ -483,17 +483,17 @@ $vmParams = @{
483483
PublicIpAddressName = $null # No public IP address
484484
}
485485
486-
# Create the VM
486+
# Create the virtual machine
487487
New-AzVM @vmParams
488488
```
489489

490-
Create a VM in the *subnet-private* subnet.
490+
Create a virtual machine in the *subnet-private* subnet.
491491

492492
```azurepowershell-interactive
493493
# Create a credential object
494494
$cred = Get-Credential
495495
496-
# Define the VM parameters
496+
# Define the virtual machine parameters
497497
$vmParams = @{
498498
ResourceGroupName = "test-rg"
499499
Location = "EastUS2"
@@ -506,15 +506,15 @@ $vmParams = @{
506506
PublicIpAddressName = $null # No public IP address
507507
}
508508
509-
# Create the VM
509+
# Create the virtual machine
510510
New-AzVM @vmParams
511511
```
512512

513-
The VM takes a few minutes to create. Don't continue with the next step until the VM is created and Azure returns output to PowerShell.
513+
The virtual machine takes a few minutes to create. Don't continue with the next step until the virtual machine is created and Azure returns the output to PowerShell.
514514

515515
### [CLI](#tab/cli)
516516

517-
Create a VM in the *subnet-1* subnet with [az vm create](/cli/azure/vm). The `--no-wait` parameter enables Azure to execute the command in the background so you can continue to the next command.
517+
Create a virtual machine in the *subnet-1* subnet with [az vm create](/cli/azure/vm). The `--no-wait` parameter enables Azure to execute the command in the background so you can continue to the next command.
518518

519519
```azurecli-interactive
520520
az vm create \
@@ -529,7 +529,7 @@ az vm create \
529529
--no-wait
530530
```
531531

532-
Create a VM in the *subnet-private* subnet.
532+
Create a virtual machine in the *subnet-private* subnet.
533533

534534
```azurecli-interactive
535535
az vm create \
@@ -546,7 +546,7 @@ az vm create \
546546

547547
## Enable IP forwarding
548548

549-
To route traffic through the NVA, turn on IP forwarding in Azure and in the operating system of **vm-nva**. When IP forwarding is enabled, any traffic received by **vm-nva** that's destined for a different IP address, isn't dropped and is forwarded to the correct destination.
549+
To route traffic through the NVA, turn on IP forwarding in Azure and in the operating system of **vm-nva**. When IP forwarding is enabled, any traffic received by **vm-nva** destined for a different IP address isn't dropped and is forwarded to the correct destination.
550550

551551
### Enable IP forwarding in Azure
552552

@@ -820,7 +820,7 @@ Test routing of network traffic from **vm-public** to **vm-private**. Test routi
820820
Resume: pmtu 1500 hops 2 back 1
821821
```
822822

823-
You can see that there are two hops in the above response for **`tracepath`** ICMP traffic from **vm-public** to **vm-private**. The first hop is **vm-nva**. The second hop is the destination **vm-private**.
823+
You can see that there are two hops in this response for **`tracepath`** ICMP traffic from **vm-public** to **vm-private**. The first hop is **vm-nva**. The second hop is the destination **vm-private**.
824824

825825
Azure sent the traffic from **subnet-1** through the NVA and not directly to **subnet-private** because you previously added the **to-private-subnet** route to **route-table-public** and associated it to **subnet-1**.
826826

@@ -854,7 +854,7 @@ Test routing of network traffic from **vm-public** to **vm-private**. Test routi
854854
Resume: pmtu 1500 hops 1 back 2
855855
```
856856

857-
You can see that there's one hop in the above response, which is the destination **vm-public**.
857+
You can see there's one hop in this response, which is the destination **vm-public**.
858858
859859
Azure sent the traffic directly from **subnet-private** to **subnet-1**. By default, Azure routes traffic directly between subnets.
860860
@@ -899,7 +899,7 @@ In this tutorial, you:
899899
900900
You can deploy different preconfigured NVAs from the [Azure Marketplace](https://azuremarketplace.microsoft.com/marketplace/apps/category/networking), which provide many useful network functions.
901901
902-
To learn more about routing, see [Routing overview](virtual-networks-udr-overview.md) and [Manage a route table](manage-route-table.yml).
902+
To learn more about routing, see [Routing overview](virtual-networks-udr-overview.md) and [Manage a route table](manage-route-table.yml). Routing can also be automatically configured at scale with [Azure Virtual Network Manager's user-defined route (UDR) management](../virtual-network-manager/concept-user-defined-route.md) feature.
903903

904904
To learn how to restrict network access to PaaS resources with virtual network service endpoints, advance to the next tutorial.
905905

0 commit comments

Comments
 (0)