AZURE : AZ 303 : Section 20 : Azure Virtual Networking

 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

180 : Lecture : Networking Overview :

 

Lets start with with VNet , this is the core pieces and have a number of capabilities that microsoft provides us to utilize with VNets , if you look at there we have a VNet boundary .

we have subnets inside the VNets , Inside we have two subnets and I have got a couple of virtual machines in each one each virtual machine has a network interface card that connects it to the subnet and by default these subnets can route to each other as they are in the same Virtual Network , if you want you can put up an NSG (Network Security Group ) which we will talk about later .

Capabilities :

• Vnets are isolated from one another unless we choose to connect to each other , they all provide internet access
• They allow to connect multiple Azure resources not just VMs we could put cloud services webapp and other services in there , we can plug them into the same VNet , every body can share that network and boundary  
• VNet connectivity we can chain this if we want it we can connect VNets to the other ones  .
• We can provide On-Premises connectivity so we can route the connectivity to On-Premises  
• We can apply traffic filter by that network security groups

 VNet has number of routing capabilities we have default routes available , user defined routes, therefore we can customize this to meet the needs of the organization to manipulate the needs of the organization .

VNets Key Points :

• VNets are primary building block of Azure networking 
•  Private network in Azure based on a address space prefix 
• Create subnets in your Vnet in your IP range  
• We can choose to bring in our DNS or Azure Provided DNS  
• Finally we can choose to connect to On-Premises on to the internet or to On-Premises if we wish to 

 

• Create a resource group
• Create a Virtual Network
• You need to create at least 1 subnet inside your network -Subnet-A
  
• DDos -- I covered separately in security 
• Service End-Points allows us to take a storage account and make it accessible directly in  the VNet 
• Firewall is the Azure firewall service which is also the covered separately in Microsoft services
  
  

 182: Demo : Creating Network in Powershell 

PowerShell Script

#Resource Group and Location

$rg = "SL-Network"

$location = "EastUS"

#VNET Name and Address Space

$VNETName = "SL-VNET-PShell"

$VNETAddressSpace = "10.0.0.0/22"

#Subnet Configurations

$websubnet = New-AzVirtualNetworkSubnetConfig -Name "SL-Web" -AddressPrefix "10.0.0.0/24"

$appsubnet = New-AzVirtualNetworkSubnetConfig -Name "SL-App" -AddressPrefix "10.0.1.0/24"

$dbsubnet = New-AzVirtualNetworkSubnetConfig -Name "SL-Data" -AddressPrefix "10.0.2.0/24"

#Create Resource Group

New-AzResourceGroup -Name $rg -Location $location

#Create VNET and Subnets

$virtualNetwork = New-AzVirtualNetwork -Name $VNETName -ResourceGroupName $rg `

    -Location $location -AddressPrefix $VNETAddressSpace -Subnet $websubnet,$appsubnet

#Add Additional Subnet

$subnetConfig = Add-AzVirtualNetworkSubnetConfig `

  -Name "LastSubnet" `

  -AddressPrefix "10.0.4.0/24" `

  -VirtualNetwork $virtualNetwork

#Write the changes to the VNET

$virtualNetwork | Set-AzVirtualNetwork

184. Lecture: IP Addressing

What is DHCP

The Dynamic Host Configuration Protocol is a network management protocol used on Internet Protocol networks for automatically assigning IP addresses and other communication parameters to devices connected to the network using a client–server 

 

185. Demo: Private DNS

•  In addition to Public DNS Zones , Microsoft has also created Private DNS Zones .
• Instead of having a third party DNS we can use the Azure DNS to host the DNS for us
• Services - DNS - Private DNS 
• After creation go into the resource -- find Virtual network links . This is actually where you can link the DNS to a virtual network
  

186. Demo: Public DNS

•   This is new service Microsoft has added which is Public DNS Zones