mirror of
https://github.com/MicrosoftLearning/AZ-104-MicrosoftAzureAdministrator.git
synced 2026-02-04 23:59:08 +00:00
commit
439f13615c
@ -45,7 +45,7 @@
|
||||
"type": "Microsoft.Network/networkSecurityGroups",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[parameters('networkSecurityGroups_az104_06_nsg1_name')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"properties": {
|
||||
"securityRules": [
|
||||
{
|
||||
@ -93,7 +93,7 @@
|
||||
"type": "Microsoft.Network/virtualNetworks",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[parameters('virtualNetworks_az104_06_vnet1_name')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"properties": {
|
||||
"addressSpace": {
|
||||
"addressPrefixes": [
|
||||
@ -103,7 +103,6 @@
|
||||
"subnets": [
|
||||
{
|
||||
"name": "subnet0",
|
||||
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
|
||||
"properties": {
|
||||
"addressPrefix": "10.60.0.0/24",
|
||||
"delegations": [],
|
||||
@ -114,7 +113,6 @@
|
||||
},
|
||||
{
|
||||
"name": "subnet1",
|
||||
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
|
||||
"properties": {
|
||||
"addressPrefix": "10.60.1.0/24",
|
||||
"delegations": [],
|
||||
@ -125,7 +123,6 @@
|
||||
},
|
||||
{
|
||||
"name": "subnet2",
|
||||
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
|
||||
"properties": {
|
||||
"addressPrefix": "10.60.2.0/24",
|
||||
"delegations": [],
|
||||
@ -143,7 +140,7 @@
|
||||
"type": "Microsoft.Compute/virtualMachines",
|
||||
"apiVersion": "2023-03-01",
|
||||
"name": "[parameters('virtualMachines_az104_06_vm0_name')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic0_name'))]"
|
||||
],
|
||||
@ -160,7 +157,7 @@
|
||||
},
|
||||
"osDisk": {
|
||||
"osType": "Windows",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '_disk1_5e57d096d8d54757b417a168417a69f8')]",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '_disk1')]",
|
||||
"createOption": "FromImage",
|
||||
"caching": "ReadWrite",
|
||||
"deleteOption": "Detach",
|
||||
@ -200,7 +197,7 @@
|
||||
"type": "Microsoft.Compute/virtualMachines",
|
||||
"apiVersion": "2023-03-01",
|
||||
"name": "[parameters('virtualMachines_az104_06_vm1_name')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic1_name'))]"
|
||||
],
|
||||
@ -217,7 +214,7 @@
|
||||
},
|
||||
"osDisk": {
|
||||
"osType": "Windows",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '_disk1_0c60cd0e9f8d43aaaebfa572d1de0319')]",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '_disk1')]",
|
||||
"createOption": "FromImage",
|
||||
"caching": "ReadWrite",
|
||||
"deleteOption": "Detach",
|
||||
@ -257,7 +254,7 @@
|
||||
"type": "Microsoft.Compute/virtualMachines",
|
||||
"apiVersion": "2023-03-01",
|
||||
"name": "[parameters('virtualMachines_az104_06_vm2_name')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic2_name'))]"
|
||||
],
|
||||
@ -274,7 +271,7 @@
|
||||
},
|
||||
"osDisk": {
|
||||
"osType": "Windows",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '_disk1_58417ddb19d7418886b4b5c42507a7f0')]",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '_disk1')]",
|
||||
"createOption": "FromImage",
|
||||
"caching": "ReadWrite",
|
||||
"deleteOption": "Detach"
|
||||
@ -313,7 +310,7 @@
|
||||
"type": "Microsoft.Compute/virtualMachines/extensions",
|
||||
"apiVersion": "2023-03-01",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '/customScriptExtension')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm0_name'))]"
|
||||
],
|
||||
@ -332,7 +329,7 @@
|
||||
"type": "Microsoft.Compute/virtualMachines/extensions",
|
||||
"apiVersion": "2023-03-01",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '/customScriptExtension')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm1_name'))]"
|
||||
],
|
||||
@ -351,7 +348,7 @@
|
||||
"type": "Microsoft.Compute/virtualMachines/extensions",
|
||||
"apiVersion": "2023-03-01",
|
||||
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '/customScriptExtension')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm2_name'))]"
|
||||
],
|
||||
@ -366,85 +363,13 @@
|
||||
"protectedSettings": {}
|
||||
}
|
||||
},
|
||||
{
|
||||
"type": "Microsoft.Network/networkSecurityGroups/securityRules",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[concat(parameters('networkSecurityGroups_az104_06_nsg1_name'), '/default-allow-http')]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
|
||||
],
|
||||
"properties": {
|
||||
"protocol": "Tcp",
|
||||
"sourcePortRange": "*",
|
||||
"destinationPortRange": "80",
|
||||
"sourceAddressPrefix": "*",
|
||||
"destinationAddressPrefix": "*",
|
||||
"access": "Allow",
|
||||
"priority": 1100,
|
||||
"direction": "Inbound",
|
||||
"sourcePortRanges": [],
|
||||
"destinationPortRanges": [],
|
||||
"sourceAddressPrefixes": [],
|
||||
"destinationAddressPrefixes": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"type": "Microsoft.Network/networkSecurityGroups/securityRules",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[concat(parameters('networkSecurityGroups_az104_06_nsg1_name'), '/default-allow-rdp')]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
|
||||
],
|
||||
"properties": {
|
||||
"protocol": "Tcp",
|
||||
"sourcePortRange": "*",
|
||||
"destinationPortRange": "3389",
|
||||
"sourceAddressPrefix": "*",
|
||||
"destinationAddressPrefix": "*",
|
||||
"access": "Allow",
|
||||
"priority": 1000,
|
||||
"direction": "Inbound",
|
||||
"sourcePortRanges": [],
|
||||
"destinationPortRanges": [],
|
||||
"sourceAddressPrefixes": [],
|
||||
"destinationAddressPrefixes": []
|
||||
}
|
||||
},
|
||||
{
|
||||
"type": "Microsoft.Network/virtualNetworks/subnets",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[concat(parameters('virtualNetworks_az104_06_vnet1_name'), '/subnet0')]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_az104_06_vnet1_name'))]"
|
||||
],
|
||||
"properties": {
|
||||
"addressPrefix": "10.60.0.0/24",
|
||||
"delegations": [],
|
||||
"privateEndpointNetworkPolicies": "Disabled",
|
||||
"privateLinkServiceNetworkPolicies": "Enabled"
|
||||
}
|
||||
},
|
||||
{
|
||||
"type": "Microsoft.Network/virtualNetworks/subnets",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[concat(parameters('virtualNetworks_az104_06_vnet1_name'), '/subnet1')]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_az104_06_vnet1_name'))]"
|
||||
],
|
||||
"properties": {
|
||||
"addressPrefix": "10.60.1.0/24",
|
||||
"delegations": [],
|
||||
"privateEndpointNetworkPolicies": "Disabled",
|
||||
"privateLinkServiceNetworkPolicies": "Enabled"
|
||||
}
|
||||
},
|
||||
{
|
||||
"type": "Microsoft.Network/networkInterfaces",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[parameters('networkInterfaces_az104_06_nic0_name')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
|
||||
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
|
||||
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
|
||||
],
|
||||
"kind": "Regular",
|
||||
@ -484,9 +409,9 @@
|
||||
"type": "Microsoft.Network/networkInterfaces",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[parameters('networkInterfaces_az104_06_nic1_name')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
|
||||
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
|
||||
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
|
||||
],
|
||||
"kind": "Regular",
|
||||
@ -526,9 +451,9 @@
|
||||
"type": "Microsoft.Network/networkInterfaces",
|
||||
"apiVersion": "2023-06-01",
|
||||
"name": "[parameters('networkInterfaces_az104_06_nic2_name')]",
|
||||
"location": "eastus",
|
||||
"location": "[resourceGroup().location]",
|
||||
"dependsOn": [
|
||||
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
|
||||
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
|
||||
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
|
||||
],
|
||||
"kind": "Regular",
|
||||
@ -544,7 +469,7 @@
|
||||
"privateIPAddress": "10.62.0.4",
|
||||
"privateIPAllocationMethod": "Dynamic",
|
||||
"subnet": {
|
||||
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]"
|
||||
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet2')]"
|
||||
},
|
||||
"primary": true,
|
||||
"privateIPAddressVersion": "IPv4"
|
||||
@ -562,6 +487,7 @@
|
||||
"nicType": "Standard",
|
||||
"auxiliaryMode": "None",
|
||||
"auxiliarySku": "None"
|
||||
}}
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
@ -32,7 +32,6 @@ There are interactive lab simulations that you might find useful for this topic.
|
||||
+ Task 2: Configure an Azure Load Balancer.
|
||||
+ Task 3: Configure an Azure Application Gateway.
|
||||
|
||||
|
||||
## Task 1: Use a template to provision an infrastructure
|
||||
|
||||
In this task, you will use a template to deploy one virtual network, one network security group, and two virtual machines.
|
||||
@ -47,11 +46,11 @@ In this task, you will use a template to deploy one virtual network, one network
|
||||
|
||||
1. On the edit template page, select **Load file**.
|
||||
|
||||
1. Locate and select the **\\Allfiles\\Lab06\\az104-06-vms-loop-template.json** file and select **Open**.
|
||||
1. Locate and select the **\\Allfiles\\Lab06\\az104-06-vms-template.json** file and select **Open**.
|
||||
|
||||
1. Select **Save**.
|
||||
|
||||
1. Select **Edit parameters** and load the **\\Allfiles\\Lab06\\az104-06-vms-loop-parameters.json** file.
|
||||
1. Select **Edit parameters** and load the **\\Allfiles\\Lab06\\az104-06-vms-parameters.json** file.
|
||||
|
||||
1. Select **Save**.
|
||||
|
||||
@ -75,15 +74,12 @@ In this task, you will use a template to deploy one virtual network, one network
|
||||
|
||||
In this task, you implement an Azure Load Balancer in front of the two Azure virtual machines in the virtual network. Load Balancers in Azure provide layer 4 connectivity across resources, such as virtual machines. Load Balancer configuration includes a front-end IP address to accept connections, a backend pool, and rules that define how connections should traverse the load balancer.
|
||||
|
||||
|
||||
## Architecture diagram - Load Balancer
|
||||
|
||||
>**Note**: Notice the Load Balancer is distributing across two virtual machines in the same virtual network.
|
||||
|
||||
|
||||

|
||||
|
||||
|
||||
1. In the Azure portal, search for and select `Load balancers` and, on the **Load balancers** blade, click **+ Create**.
|
||||
|
||||
1. Create a load balancer with the following settings (leave others with their default values) then click **Next: Frontend IP configuration**:
|
||||
@ -109,7 +105,6 @@ In this task, you implement an Azure Load Balancer in front of the two Azure vir
|
||||
| Gateway Load Balancer | None |
|
||||
| Public IP address | Select **Create new** (use the instructions in the next step) |
|
||||
|
||||
|
||||
1. On the **Add a public IP address** popup, use the following settings before clicking **OK** and then **Add**. When completed click **Next: Backend pools**.
|
||||
|
||||
| Setting | Value |
|
||||
@ -174,7 +169,6 @@ In this task, you implement an Azure Load Balancer in front of the two Azure vir
|
||||
|
||||
> **Note**: You may need to refresh more than once or open a new browser window in InPrivate mode.
|
||||
|
||||
|
||||
## Task 3: Configure an Azure Application Gateway
|
||||
|
||||
In this task, you implement an Azure Application Gateway in front of two Azure virtual machines. An Application Gateway provides layer 7 load balancing, Web Application Firewall (WAF), SSL termination, and end-to-end encryption to the resources defined in the backend pool. The Application Gateway routes images to one virtual machine and videos to the other virtual machine.
|
||||
@ -240,7 +234,7 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
|
||||
| Name | `az104-appgwbe` |
|
||||
| Add backend pool without targets | **No** |
|
||||
| Virtual machine | **az104-rg6-nic1 (10.60.1.4)** |
|
||||
| Virtual machine | **az104-rg6-nic2 (10.60.0.4)** |
|
||||
| Virtual machine | **az104-rg6-nic2 (10.60.2.4)** |
|
||||
|
||||
1. Click **Add a backend pool**. This is the backend pool for **images**. Specify the following settings (leave others with their default values). When completed click **Add**.
|
||||
|
||||
@ -256,7 +250,7 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
|
||||
| --- | --- |
|
||||
| Name | `az104-videobe` |
|
||||
| Add backend pool without targets | **No** |
|
||||
| Virtual machine | **az104-rg6-nic2 (10.60.0.4)** |
|
||||
| Virtual machine | **az104-rg6-nic2 (10.60.2.4)** |
|
||||
|
||||
1. Select **Next: Configuration** and then **Add routing rules**. Complete the information.
|
||||
|
||||
@ -323,8 +317,6 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
|
||||
|
||||
> **Note**: You may need to refresh more than once or open a new browser window in InPrivate mode.
|
||||
|
||||
|
||||
|
||||
## Key takeaways
|
||||
|
||||
Congratulations on completing the lab. Here are the main takeaways for this lab.
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user