Merge pull request #50265 from wwlpublish/6082c5298148dbe289ea492a3c7e49744540163efe50fe59448525f648b22cb2-live

JamesJBarnett · web-flow · commit 10d26ea04d37 · 2025-05-02T10:17:41.000-07:00
Modules/M02-design-implement-hybrid-networking
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/1-introduction.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/1-introduction.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Introduction
   description: "Introduction"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/2-design-implement-vpn-gateway.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/2-design-implement-vpn-gateway.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Design and implement Azure VPN Gateway
   description: "Design and implement Azure VPN Gateway"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/3-exercise-create-configure-local-network-gateway.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/3-exercise-create-configure-local-network-gateway.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: 'Exercise: Create and configure a virtual network gateway'
   description: "Exercise: Create and configure a virtual network gateway"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/4-connect-networks-site-to-site-vpn-connections.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/4-connect-networks-site-to-site-vpn-connections.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Connect networks with Site-to-site VPN connections
   description: "Connect networks with Site-to-site VPN connections"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/5-connect-devices-to-networks-point-to-site-vpn-connections.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/5-connect-devices-to-networks-point-to-site-vpn-connections.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Connect devices to networks with Point-to-site VPN connections
   description: "Connect devices to networks with Point-to-site VPN connections"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/6-connect-remote-resources-by-using-azure-virtual-wans.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/6-connect-remote-resources-by-using-azure-virtual-wans.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Connect remote resources by using Azure Virtual WANs
   description: "Connect remote resources by using Azure Virtual WANs"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/7-exercise-create-virtual-wan-by-using-azure-portal.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/7-exercise-create-virtual-wan-by-using-azure-portal.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: 'Exercise: Create a Virtual WAN by using the Azure portal'
   description: "Exercise: create a Virtual WAN by using the Azure portal"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/8-create-network-virtual-appliance-virtual-hub.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/8-create-network-virtual-appliance-virtual-hub.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Create a network virtual appliance (NVA) in a virtual hub
   description: "Create a network virtual appliance (NVA) in a virtual hub"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/9-summary.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/9-summary.yml
@@ -6,7 +6,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Summary
   description: "Summary"
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: unit
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/2-design-implement-vpn-gateway.md b/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/2-design-implement-vpn-gateway.md
@@ -1,7 +1,11 @@
 
-
 Azure [VPN Gateway](/azure/vpn-gateway/vpn-gateway-about-vpngateways) is a service that can be used to send encrypted traffic between an Azure virtual network and on-premises locations over the public Internet. You can also use VPN Gateway to send encrypted traffic between Azure virtual networks over the Microsoft network. VPN Gateway uses a specific type of Azure virtual network gateway called a VPN gateway. Multiple connections can be created to the same VPN gateway. When you create multiple connections, all VPN tunnels share the available gateway bandwidth.
 
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=f67524cf-ba8b-4e81-8fe3-29f75213d740]
+
+
+
+
 > [!NOTE] 
 > A virtual network gateway is composed of two or more special virtual machines that are deployed to a specific subnet called the gateway subnet. Azure manages the virtual machines so they don't require administrative attention.
 
@@ -17,12 +21,6 @@ Creating a virtual network gateway can take some time to complete, so it's vital
  -  VPN gateway type
  -  VPN Gateway SKU
 
-### VPN Gateway planning (video)
-
-This video summarizes scenarios for VPN gateways. These scenarios include on-premises and point-to-site connections. 
-
-> [!VIDEO https://learn-video.azurefd.net/vod/player?id=f67524cf-ba8b-4e81-8fe3-29f75213d740]
-
 ### VPN Gateway SKUs
 
 When you create a VPN Gateway, you must select the [gateway SKU](/azure/vpn-gateway/about-gateway-skus). You can select a SKU that satisfies your requirements based on the workload, throughput, feature, and SLAs. 
@@ -52,11 +50,17 @@ Route-based VPNs were previously called dynamic routing gateways. Route-based VP
 
 ## High availability options for VPN connections
 
+
 To provide better availability for your VPN connections, consider one of these options. 
 
  -  VPN Gateway redundancy (active-standby)
  -  Active-active Azure VPN gateway
 
+ 
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=bc399061-c874-4da9-8cb7-282d6d01f816]
+
+
+
 ### Active-standby Azure VPN gateways
 
 You can create an Azure VPN gateway in an active-standby configuration. Active-standby is the default configuration. In this configuration there are two instances, active and standby. The standby connection takes over when the active connection is disrupted. Switching to the standby connection causes a service disruption. 
@@ -72,10 +76,4 @@ You can create an Azure VPN gateway in an active-standby configuration. Active-s
 
 You can create an Azure VPN gateway in an active-active configuration. In the active-active configuration, both instances of the gateway establish VPN tunnels to your on-premises VPN device. The traffic from your Azure virtual network to your on-premises network is routed through both tunnels simultaneously. If an outage occurs, Azure automatically switches to the other tunnel. 
 
-:::image type="content" source="../media/vpn-active-active-89241ba7.png" alt-text="Diagram of an Azure VPN Gateway in active-active configuration.":::
-
-### Gateway redundancy comparison (video)
-
-This video reviews VPN gateway redundancy options. 
-
-> [!VIDEO https://learn-video.azurefd.net/vod/player?id=bc399061-c874-4da9-8cb7-282d6d01f816]
+:::image type="content" source="../media/vpn-active-active-89241ba7.png" alt-text="Diagram of an Azure VPN Gateway in active-active configuration.":::
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/3-exercise-create-configure-local-network-gateway.md b/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/3-exercise-create-configure-local-network-gateway.md
@@ -9,35 +9,25 @@ In this exercise, you configure a virtual network gateway to connect the Contoso
 :::image type="content" source="../media/3-exercise-create-configure-local-network-gateway.png" alt-text="Diagram of virtual network gateway.":::
 
 
-## Objectives
-
- -  **Task 1**: Create CoreServicesVnet and ManufacturingVnet
-    - Use a template to create the virtual networks. You can review the [lab template](https://github.com/MicrosoftLearning/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/blob/master/Allfiles/Exercises/M02/azuredeploy.json).
-    - Use Azure PowerShell to deploy the template. 
- -  **Task 2**: Create CoreServicesTestVM
-    - Use a template to create the virtual machines. You can review the [lab template](https://github.com/MicrosoftLearning/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/blob/master/Allfiles/Exercises/M02/CoreServicesVMazuredeploy.json).
-    - Use Azure PowerShell to deploy the template. 
- -  **Task 3**: Create ManufacturingTestVM
-    - Use a template to create the virtual machines. You can review the [lab template](https://github.com/MicrosoftLearning/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/blob/master/Allfiles/Exercises/M02/ManufacturingVMazuredeploy.json).
-    - Use Azure PowerShell to deploy the template. 
- -  **Task 4**: Connect to the Test VMs using RDP
- -  **Task 5**: Test the connection between the VMs
- -  **Task 6**: Create CoreServicesVnet Gateway
- -  **Task 7**: Create ManufacturingVnet Gateway
- -  **Task 8**: CoreServicesVnet to ManufacturingVnet
- -  **Task 9**: Connect ManufacturingVnet to CoreServicesVnet
- -  **Task 10**: Verify that the connections connect
- -  **Task 11**: Test the connection between the VMs
+## Job skills
 
+- Create the .oreServicesVnet and ManufacturingVnet
+- Create the CoreServicesTestVM.
+- Create the ManufacturingTestVM.
+- Connect to the test VMs using RDP.
+- Test the connection between the VMs.
+- Create the CoreServicesVnet Gateway.
+- Create the ManufacturingVnet Gateway.
+- Connect the CoreServicesVnet to ManufacturingVnet.
+- Connect the ManufacturingVnet to CoreServicesVnet
+- Verify that the connections are provisioned. 
+- Test the connection between the VMs.
 
 
 > [!NOTE]
-> Click on the thumbnail image to start the lab simulation. When you're done, be sure to return to this page so you can continue learning. 
+> To complete this exercise, you need an [Azure subscription](https://azure.microsoft.com/free/).
 
-> [!NOTE]
-> You may find slight differences between the interactive simulation and the hosted lab, but the core concepts and ideas being demonstrated are the same.
+Launch the exercise, and follow the instructions. When finished, be sure to return to this page so you can continue learning.
 
-> [!NOTE]
-> If you have an Azure subscription detailed labs steps are available, [Create and configure a virtual network gateway](https://microsoftlearning.github.io/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/Instructions/Exercises/M02-Unit%203%20Create%20and%20configure%20a%20virtual%20network%20gateway.html)
 
-[![Screenshot of the simulation page.](../media/simulation-gateway-thumbnail.jpg)](https://mslabs.cloudguides.com/guides/AZ-700%20Lab%20Simulation%20-%20Create%20and%20configure%20a%20virtual%20network%20gateway)
+[![Button to launch exercise.](../media/launch-exercise.png)](https://microsoftlearning.github.io/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/Instructions/Exercises/M02-Unit%203%20Create%20and%20configure%20a%20virtual%20network%20gateway.html)
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/4-connect-networks-site-to-site-vpn-connections.md b/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/4-connect-networks-site-to-site-vpn-connections.md
@@ -1,5 +1,9 @@
 
-A [site-to-site (S2S) VPN gateway](/azure/vpn-gateway/design#s2smulti) lets you create a secure connection to your virtual network from another virtual network or a physical network. The following diagram illustrates how you would connect an on-premises network to the Azure platform. The internet connection uses an IPsec VPN tunnel.
+A [site-to-site (S2S) VPN gateway](/azure/vpn-gateway/design#s2smulti) lets you create a secure connection to your virtual network from another virtual network or a physical network. 
+
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=cce9cc6b-a7b7-4b5b-9661-b5c666ce1bd7]
+
+The following diagram illustrates how you would connect an on-premises network to the Azure platform. The internet connection uses an IPsec VPN tunnel.
 
 :::image type="content" source="../media/site-site-vpn-architecture-78aaf8d4.png" alt-text="Diagram of the site-to-site VPN Gateway architecture.":::
 
@@ -23,10 +27,4 @@ Using this architecture offers several benefits, including:
  -  Encrypting data and traffic between the on-premises gateway and the Azure gateway.
  -  Allowing for future network requirements. 
 
-This architecture isn't applicable in all situations because it uses an existing internet connection as the link between the two gateway points. Bandwidth constraints can cause latency issues that result from reuse of the existing infrastructure.
-
-### Implement a site-to-site VPN connection (video)
-
-This video reviews site-to-site connections. The diagram builds over the video. 
-
-> [!VIDEO https://learn-video.azurefd.net/vod/player?id=cce9cc6b-a7b7-4b5b-9661-b5c666ce1bd7]
+This architecture isn't applicable in all situations because it uses an existing internet connection as the link between the two gateway points. Bandwidth constraints can cause latency issues that result from reuse of the existing infrastructure.
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/5-connect-devices-to-networks-point-to-site-vpn-connections.md b/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/5-connect-devices-to-networks-point-to-site-vpn-connections.md
@@ -1,4 +1,9 @@
-A [Point-to-Site (P2S) VPN gateway](/azure/vpn-gateway/point-to-site-about) connection lets you create a secure connection to your virtual network from an individual client computer. A P2S connection is established by starting it from the client computer. This solution is useful for telecommuters who want to connect to Azure VNets from a remote location, such as from home or a conference. P2S VPN is also a useful solution to use instead of S2S VPN when you have only a few clients that need to connect to a VNet.
+A [Point-to-Site (P2S) VPN gateway](/azure/vpn-gateway/point-to-site-about) connection lets you create a secure connection to your virtual network from an individual client computer.
+
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=d71189fa-2a1e-406d-baef-3e58adfa907a]
+
+
+ A P2S connection is established by starting it from the client computer. This solution is useful for telecommuters who want to connect to Azure VNets from a remote location, such as from home or a conference. P2S VPN is also a useful solution to use instead of S2S VPN when you have only a few clients that need to connect to a VNet.
 
 :::image type="content" source="../media/point-site-diagram.png" alt-text="Diagram of a point-to-site connection.":::
 
@@ -26,10 +31,6 @@ This authentication is a popular option because it allows users to connect to Az
 The RADIUS server is deployed either on-premises or in your Azure VNet. During authentication, the Azure VPN Gateway passes authentication messages back and forth between the RADIUS server and the connecting device. Thus, the Gateway must be able to communicate with the RADIUS server. If the RADIUS server is present on-premises, then a VPN S2S connection from Azure to the on-premises site is required for reachability.
 
 
-### Point-to-site connections (video)
-
-This video reviews the basics of point-to-site connections. 
 
-> [!VIDEO https://learn-video.azurefd.net/vod/player?id=d71189fa-2a1e-406d-baef-3e58adfa907a]
 
 
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/6-connect-remote-resources-by-using-azure-virtual-wans.md b/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/6-connect-remote-resources-by-using-azure-virtual-wans.md
@@ -1,10 +1,15 @@
 
 
+
 Today’s workforce is more distributed than ever before. Organizations are exploring options that enable their employees, partners, and customers to connect to the resources they need from wherever they are. It’s not unusual for organizations to operate across national/regional boundaries, and across time zones.
 
-## What is Azure Virtual WAN?
+[Azure Virtual WAN](/azure/virtual-wan/virtual-wan-about) is a networking service that brings many networking, security, and routing functionalities together to provide a single operational interface. 
+
+> [!VIDEO https://learn-video.azurefd.net/vod/player?id=70d2fdaa-8b19-4e08-9845-71426ce0504e]
+
+### Azure Virtual WAN features
 
-[Azure Virtual WAN](/azure/virtual-wan/virtual-wan-about) is a networking service that brings many networking, security, and routing functionalities together to provide a single operational interface. Some of the main features include:
+Some of the main features include:
 
 - Branch connectivity (via connectivity automation from Virtual WAN Partner devices such as SD-WAN or VPN CPE).
 - Site-to-site VPN connectivity.
@@ -27,11 +32,7 @@ To configure an end-to-end virtual WAN, you create:
 - **Hub route table**. You can create a virtual hub route and apply the route to the virtual hub route table. You can apply multiple routes to the virtual hub route table.
 - **Site (optional)**. This resource is used for site-to-site connections only. 
 
-### Virtual WAN usage cases
-
-This video reviews several Virtual WAN usage cases. 
 
-> [!VIDEO https://learn-video.azurefd.net/vod/player?id=70d2fdaa-8b19-4e08-9845-71426ce0504e]
 
 ### Choose a Virtual WAN SKU
 
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/7-exercise-create-virtual-wan-by-using-azure-portal.md b/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/7-exercise-create-virtual-wan-by-using-azure-portal.md
@@ -8,22 +8,18 @@ In this exercise, you create a Virtual WAN for Contoso.
 :::image type="content" source="../media/7-exercise-create-virtual-wan-by-using-azure-portal.png" alt-text="Diagram of the lab virtual network WAN architecture.":::
 
 
-## Objectives
-
- -  **Task 1**: Create a Virtual WAN.
- -  **Task 2**: Create a hub by using Azure portal.
- -  **Task 3**: Connect a VNet to the Virtual Hub.
+## Job skills
 
+- Create a Virtual WAN.
+- Create a virtual hub by using Azure portal.
+- Connect a virtual network to the virtual hub. 
 
 
 > [!NOTE]
-> Select the thumbnail image to start the lab simulation. When you're done, be sure to return to this page so you can continue learning. 
+> To complete this exercise, you need an [Azure subscription](https://azure.microsoft.com/free/).
 
-> [!NOTE]
->You may find slight differences between the interactive simulation and the hosted lab, but the core concepts and ideas being demonstrated are the same.
+Launch the exercise, and follow the instructions. When finished, be sure to return to this page so you can continue learning.
 
-> [!NOTE]
-> If you have an Azure subscription detailed labs steps are available, [Create a Virtual WAN by using Azure portal](https://microsoftlearning.github.io/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/Instructions/Exercises/M02-Unit%207%20Create%20a%20Virtual%20WAN%20by%20using%20Azure%20Portal.html).
 
-[![Screenshot of the simulation page.](../media/simulation-wan-thumbnail.jpg)](https://mslabs.cloudguides.com/guides/AZ-700%20Lab%20Simulation%20-%20Create%20a%20virtual%20WAN%20using%20the%20Azure%20portal)
+[![Button to launch exercise.](../media/launch-exercise.png)](https://microsoftlearning.github.io/AZ-700-Designing-and-Implementing-Microsoft-Azure-Networking-Solutions/Instructions/Exercises/M02-Unit%207%20Create%20a%20Virtual%20WAN%20by%20using%20Azure%20Portal.html)
 
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/8-create-network-virtual-appliance-virtual-hub.md b/learn-pr/wwl-azure/design-implement-hybrid-networking/includes/8-create-network-virtual-appliance-virtual-hub.md
@@ -1,5 +1,6 @@
 
 
+
 One of the benefits of Azure Virtual WAN is the ability to support reliable connections from many different technologies. These technologies include ExpressRoute, VPN Gateway, Barracuda CloudGen WAN, Cisco Cloud OnRamp for multicloud, and VMware SD-WAN. These types of devices are known as [network virtual appliances (NVAs)](/azure/virtual-wan/about-nva-hub). NVAs enable transitive connectivity throughout an organization's Virtual WAN.
 
 NVAs are deployed directly into a Virtual WAN hub and have an externally facing public IP address. This capability lets customers connect their branch Customer Premises Equipment (CPE) to the same brand NVA in the virtual hub. 
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/index.yml b/learn-pr/wwl-azure/design-implement-hybrid-networking/index.yml
@@ -5,7 +5,7 @@ metadata:
   prefetch-feature-rollout: true
   title: Design and implement hybrid networking
   description: "You learn how to design and implement hybrid networking solutions such as Site-to-Site VPN connections, Point-to-Site VPN connections, Azure Virtual WAN, and Virtual WAN hubs."
-  ms.date: 04/14/2025
+  ms.date: 05/02/2025
   author: wwlpublish
   ms.author: cynthist
   ms.topic: module
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/media/launch-exercise.png b/learn-pr/wwl-azure/design-implement-hybrid-networking/media/launch-exercise.png
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/media/simulation-gateway-thumbnail.jpg b/learn-pr/wwl-azure/design-implement-hybrid-networking/media/simulation-gateway-thumbnail.jpg
diff --git a/learn-pr/wwl-azure/design-implement-hybrid-networking/media/simulation-wan-thumbnail.jpg b/learn-pr/wwl-azure/design-implement-hybrid-networking/media/simulation-wan-thumbnail.jpg
