Book Image

Designing and Implementing Microsoft Azure Networking Solutions

By : David Okeyode
Book Image

Designing and Implementing Microsoft Azure Networking Solutions

By: David Okeyode

Overview of this book

Designing and Implementing Microsoft Azure Networking Solutions is a comprehensive guide that covers every aspect of the AZ-700 exam to help you fully prepare to take the certification exam. Packed with essential information, this book is a valuable resource for Azure cloud professionals, helping you build practical skills to design and implement name resolution, VNet routing, cross-VNet connectivity, and hybrid network connectivity using the VPN Gateway and the ExpressRoute Gateway. It provides step-by-step instructions to design and implement an Azure Virtual WAN architecture for enterprise use cases. Additionally, the book offers detailed guidance on network security design and implementation, application delivery services, private platform service connectivity, and monitoring networks in Azure. Throughout the book, you’ll find hands-on labs carefully integrated to align with the exam objectives of the Azure Network Engineer certification (AZ-700), complemented by practice questions at the end of each chapter, allowing you to test your knowledge. By the end of this book, you’ll have mastered the fundamentals of Azure networking and be ready to take the AZ-700 exam.
Table of Contents (17 chapters)
1
Part 1: Design and Implement Core Networking Infrastructure in Azure
6
Part 2: Design, Implement, and Manage Hybrid Networking
11
Part 3: Design and Implement Traffic Management and Network Monitoring

Hands-on exercise – creating a single-stack VNet in Azure

In this exercise, we will create a single-stack IPv4 network for a fictional organization called CharisTech, which is in the process of migrating some on-premises applications to Azure. We will implement two VNets and subnets to support workloads that will be migrated. Here are the tasks that we will complete in this exercise:

  • Task 1: Creating the CharisTech resource group
  • Task 2: Creating the CoreServicesVNet VNet and subnets
  • Task 3: Verifying the creation of VNets and subnets

Figure 1.15 shows the outcome that we’ll get to at the end of the tasks:

Figure 1.15 – CharisTech Azure VNets and subnets

Figure 1.15 – CharisTech Azure VNets and subnets

Task 1 – creating the CharisTech resource group

A resource group is a logical container for managing related Azure resources. In this task, we will create a resource group called CharisTechRG that will hold the networking resources that we will create in other tasks:

  1. Open a web browser and browse to https://portal.azure.com.
  2. On the left-hand side, click on the portal menu icon, then click on Create a resource:
Figure 1.16 – Create a resource

Figure 1.16 – Create a resource

  1. In the search area, type Resource group and press Enter. Click on the Create button:
Figure 1.17 – Create a resource group

Figure 1.17 – Create a resource group

  1. In the Basics tab, enter the following values:
    • Subscription: Select your Azure subscription (1)
    • Resource group: CharisTechRG (2)
    • Region: East US (3)

Then, select Review + create (4):

Figure 1.18 – Creating a resource group

Figure 1.18 – Creating a resource group

  1. Select Create. It should only take a few seconds to create the resource group.
  2. In the top-right corner of the window, select the notification icon (the bell icon). Then, select Go to resource group to open the newly created resource group:
Figure 1.19 – Opening the newly created resource group

Figure 1.19 – Opening the newly created resource group

Leave this window open for the next task. Now that we have a resource group that we can use as a management container, let us proceed to create the VNets and subnets.

Task 2 – creating the CoreServicesVNet VNet and subnets

The first network that we will create is the CoreServicesVNet VNet (Figure 1.15). The network will be deployed in the East US region. It will be segmented into three subnets that will host the following workloads:

  • Public web services (PublicWebServiceSubnet)
  • Databases (DatabaseSubnet)
  • Shared services that are key to the operations of the business, such as domain controllers (SharedServicesSubnet)

Let’s get started:

  1. In the CharisTechRG window, select + Create. In the search box, enter Virtual Network. Select Virtual Network in the search results:
Figure 1.20 – Creating a resource

Figure 1.20 – Creating a resource

  1. On the Virtual Network page, select Create.
  2. On the Create virtual network window, in the Basics tab, enter the following values:
    • Subscription: Select your Azure subscription
    • Resource group: CharisTechRG
    • Name: CoreServicesVNet
    • Region: East US

Then, click Next: IP Addresses >:

Figure 1.21 – Creating the VNet

Figure 1.21 – Creating the VNet

  1. In the IP Addresses tab, change the default IP address space to 10.10.0.0/16. Then, select + Add subnet:
Figure 1.22 – Setting the IP address

Figure 1.22 – Setting the IP address

  1. In the Add subnet window, configure the following:
    • Subnet name: SharedServicesSubnet
    • Subnet address range: 10.10.1.0/24
    • NAT gateway: None
    • Service endpoint: 0 selected

Then, click Add:

Figure 1.23 – Adding a subnet

Figure 1.23 – Adding a subnet

  1. Click on + Add subnet and repeat Step 5 to add the following subnet configurations:

Subnet

Configuration option

Configuration value

DatabaseSubnet

Subnet name

DatabaseSubnet

Subnet address range

10.10.2.0/24

PublicWebServiceSubnet

Subnet name

PublicWebServiceSubnet

Subnet address range

10.10.3.0/24

Table 1.1 – Subnet configuration details

7. The configuration should look like Figure 1.24. Click on Review + create:

Figure 1.24 – Subnets added to the VNet configuration

Figure 1.24 – Subnets added to the VNet configuration

8. Select Create. It should only take a few seconds to create the VNet and subnets.

Awesome! After the deployment completes, let us review what has been created.

Task 3 – verifying the creation of the VNet and subnets

In this task, we will review the resources created in the last task:

  1. Click on Go to resource to open the newly created VNet:
Figure 1.25 –Microsoft VNet overview

Figure 1.25 –Microsoft VNet overview

  1. In the CoreServicesVNet virtual network blade, in the Settings section, click on Subnets to review the subnets that were created:
Figure 1.26 – Reviewing the subnets

Figure 1.26 – Reviewing the subnets

You can leave this window open for the next task. Now that we have a resource group that we can use as a management container, let us proceed to create the VNets and subnets.