You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-network/how-to-create-encryption.md
+33-33Lines changed: 33 additions & 33 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,7 +1,7 @@
1
1
---
2
2
title: Create a virtual network with encryption - Azure portal
3
3
titleSuffix: Azure Virtual Network
4
-
description: Learn how to create an encrypted virtual network using the Azure portal. A virtual network lets Azure resources communicate with each other and with the internet.
4
+
description: Learn how to create an encrypted virtual network by using the Azure portal. A virtual network lets Azure resources communicate with each other and the internet.
5
5
author: asudbring
6
6
ms.service: azure-virtual-network
7
7
ms.topic: how-to
@@ -10,25 +10,22 @@ ms.author: allensu
10
10
11
11
---
12
12
13
-
# Create a virtual network with encryption using the Azure portal
13
+
# Create a virtual network with encryption by using the Azure portal
14
14
15
-
Azure Virtual Network encryption is a feature of Azure Virtual Network. Virtual network encryption allows you to seamlessly encrypt and decrypt internal network traffic over the wire, with minimal effect to performance and scale. Azure Virtual Network encryption protects data traversing your virtual network virtual machine to virtual machine and virtual machine to on-premises.
15
+
Azure Virtual Network encryption is a feature of Azure Virtual Network. With Virtual Network encryption, you can seamlessly encrypt and decrypt internal network traffic over the wire, with minimal effect to performance and scale. Virtual Network encryption protects data that traverses your virtual network from virtual machine to virtual machine and from virtual machine to on-premises.
16
16
17
17
## Prerequisites
18
18
19
19
### [Portal](#tab/portal)
20
20
21
-
-An Azure account with an active subscription. [Create one for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
21
+
An Azure account with an active subscription. [Create one for free](https://azure.microsoft.com/free/?ref=microsoft.com&utm_source=microsoft.com&utm_medium=docs&utm_campaign=visualstudio).
22
22
23
23
### [PowerShell](#tab/powershell)
24
24
25
-
- An Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
26
-
27
-
- Azure PowerShell installed locally or Azure Cloud Shell.
28
-
25
+
- Have an Azure account with an active subscription. [Create an account for free](https://azure.microsoft.com/free/?WT.mc_id=A261C142F).
26
+
- Install Azure PowerShell locally or use Azure Cloud Shell.
29
27
- Sign in to Azure PowerShell and select the subscription with which you want to use this feature. For more information, see [Sign in with Azure PowerShell](/powershell/azure/authenticate-azureps).
30
-
31
-
- Ensure your `Az.Network` module is 4.3.0 or later. To verify the installed module, use the command Get-InstalledModule -Name `Az.Network`. If the module requires an update, use the command Update-Module -Name `Az.Network` if necessary.
28
+
- Ensure that your `Az.Network` module is 4.3.0 or later. To verify the installed module, use the command `Get-InstalledModule -Name Az.Network`. If the module requires an update, use the command `Update-Module -Name Az.Network`, if necessary.
32
29
33
30
If you choose to install and use PowerShell locally, this article requires the Azure PowerShell module version 5.4.1 or later. Run `Get-Module -ListAvailable Az` to find the installed version. If you need to upgrade, see [Install Azure PowerShell module](/powershell/azure/install-Az-ps). If you're running PowerShell locally, you also need to run `Connect-AzAccount` to create a connection with Azure.
34
31
@@ -38,17 +35,19 @@ If you choose to install and use PowerShell locally, this article requires the A
Create a resource group with [New-AzResourceGroup](/powershell/module/az.resources/new-azresourcegroup) named **test-rg** in the **eastus2** location.
50
+
Create a resource group with [New-AzResourceGroup](/powershell/module/az.resources/new-azresourcegroup) named `test-rg` in the `eastus2` location.
52
51
53
52
```azurepowershell-interactive
54
53
$rg =@{
@@ -83,7 +82,7 @@ New-AzVirtualNetwork @net
83
82
84
83
### [CLI](#tab/cli)
85
84
86
-
Create a resource group with [az group create](/cli/azure/group#az-group-create) named **test-rg** in the **eastus2** location.
85
+
Create a resource group with [az group create](/cli/azure/group#az-group-create) named `test-rg` in the `eastus2` location.
87
86
88
87
```azurecli-interactive
89
88
az group create \
@@ -108,31 +107,31 @@ Use [az network vnet create](/cli/azure/network/vnet#az-network-vnet-create) to
108
107
---
109
108
110
109
> [!IMPORTANT]
111
-
> Azure Virtual Network encryption requires supported virtual machine SKUs in the virtual network for traffic to be encrypted. The setting **dropUnencrypted** will drop traffic between unsupported virtual machine SKUs if they are deployed in the virtual network. For more information, see [Azure Virtual Network encryption requirements](virtual-network-encryption-overview.md#requirements).
110
+
> To encrypt traffic, Virtual Network encryption requires supported virtual machine versions in the virtual network. The setting `dropUnencrypted` drops traffic between unsupported virtual machine versions if they're deployed in the virtual network. For more information, see [Azure Virtual Network encryption requirements](virtual-network-encryption-overview.md#requirements).
112
111
113
112
## Enable encryption on a virtual network
114
113
115
114
### [Portal](#tab/portal)
116
115
117
116
Use the following steps to enable encryption for a virtual network.
118
117
119
-
1. In the search box at the top of the portal, begin typing**Virtual networks**. When **Virtual networks** appears in the search results, select it.
118
+
1. In the search box at the top of the portal, begin to enter**Virtual networks**. When **Virtual networks** appears in the search results, select it.
120
119
121
-
1. Select **vnet-1**.
120
+
1. Select **vnet-1** to open the **vnet-1** pane.
122
121
123
-
1.In the **Overview** of **vnet-1**, select the **Properties** tab.
122
+
1.On the service menu, select **Overview**, and then select the **Properties** tab.
124
123
125
-
1.Select**Disabled** next to **Encryption**:
124
+
1.Under**Encryption**, select **Disabled**.
126
125
127
-
:::image type="content" source="./media/how-to-create-encryption-portal/virtual-network-properties.png" alt-text="Screenshot of properties of the virtual network.":::
126
+
:::image type="content" source="./media/how-to-create-encryption-portal/virtual-network-properties.png" alt-text="Screenshot that shows properties of the virtual network.":::
128
127
129
128
1. Select the box next to **Virtual network encryption**.
130
129
131
130
1. Select **Save**.
132
131
133
132
### [PowerShell](#tab/powershell)
134
133
135
-
You can also enable encryption on an existing virtual network using [Set-AzVirtualNetwork](/powershell/module/az.network/set-azvirtualnetwork). **This step isn't necessary if you created the virtual network with encryption enabled in the previous steps.**
134
+
You can also enable encryption on an existing virtual network by using [Set-AzVirtualNetwork](/powershell/module/az.network/set-azvirtualnetwork). *This step isn't necessary if you created the virtual network with encryption enabled in the previous steps.*
136
135
137
136
```azurepowershell-interactive
138
137
## Place the virtual network configuration into a variable. ##
@@ -152,7 +151,7 @@ $vnet | Set-AzVirtualNetwork
152
151
153
152
### [CLI](#tab/cli)
154
153
155
-
You can also enable encryption on an existing virtual network using [az network vnet update](/cli/azure/network/vnet#az-network-vnet-update). **This step isn't necessary if you created the virtual network with encryption enabled in the previous steps.**
154
+
You can also enable encryption on an existing virtual network by using [az network vnet update](/cli/azure/network/vnet#az-network-vnet-update). *This step isn't necessary if you created the virtual network with encryption enabled in the previous steps.*
156
155
157
156
```azurecli-interactive
158
157
az network vnet update \
@@ -164,19 +163,19 @@ You can also enable encryption on an existing virtual network using [az network
164
163
165
164
---
166
165
167
-
## Verify encryption enabled
166
+
## Verify that encryption is enabled
168
167
169
168
### [Portal](#tab/portal)
170
169
171
-
1. In the search box at the top of the portal, begin typing**Virtual networks**. When **Virtual networks** appears in the search results, select it.
170
+
1. In the search box at the top of the portal, begin to enter**Virtual networks**. When **Virtual networks** appears in the search results, select it.
172
171
173
-
1. Select **vnet-1**.
172
+
1. Select **vnet-1** to open the **vnet-1** pane.
174
173
175
-
1.In the **Overview** of **vnet-1**, select the **Properties** tab.
174
+
1.On the service menu, select **Overview**, and then select the **Properties** tab.
176
175
177
176
1. Verify that **Encryption** is set to **Enabled**.
178
177
179
-
:::image type="content" source="./media/how-to-create-encryption-portal/virtual-network-properties-encryption-enabled.png" alt-text="Screenshot of properties of the virtual network with encryption enabled.":::
178
+
:::image type="content" source="./media/how-to-create-encryption-portal/virtual-network-properties-encryption-enabled.png" alt-text="Screenshot that shows properties of the virtual network with Encryption st as Enabled.":::
180
179
181
180
### [PowerShell](#tab/powershell)
182
181
@@ -191,7 +190,7 @@ $net = @{
191
190
$vnet = Get-AzVirtualNetwork @net
192
191
```
193
192
194
-
To view the parameter for encryption, enter the following information.
193
+
To view the parameter for encryption, enter the following information:
When no longer needed, you can use [Remove-AzResourceGroup](/powershell/module/az.resources/remove-azresourcegroup) to remove the resource group and all of the resources it contains:
236
+
When you no longer need this resource group, use [Remove-AzResourceGroup](/powershell/module/az.resources/remove-azresourcegroup) to remove the resource group and all the resources it contains.
0 commit comments