Merge pull request #835 from jmenne/lab6corrections

Lab6 Corrections
This commit is contained in:
staleycyn 2024-02-12 08:13:26 -08:00 committed by GitHub
commit 439f13615c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 82 additions and 164 deletions

View File

@ -45,7 +45,7 @@
"type": "Microsoft.Network/networkSecurityGroups",
"apiVersion": "2023-06-01",
"name": "[parameters('networkSecurityGroups_az104_06_nsg1_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"properties": {
"securityRules": [
{
@ -93,7 +93,7 @@
"type": "Microsoft.Network/virtualNetworks",
"apiVersion": "2023-06-01",
"name": "[parameters('virtualNetworks_az104_06_vnet1_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"properties": {
"addressSpace": {
"addressPrefixes": [
@ -103,7 +103,6 @@
"subnets": [
{
"name": "subnet0",
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
"properties": {
"addressPrefix": "10.60.0.0/24",
"delegations": [],
@ -114,7 +113,6 @@
},
{
"name": "subnet1",
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
"properties": {
"addressPrefix": "10.60.1.0/24",
"delegations": [],
@ -125,7 +123,6 @@
},
{
"name": "subnet2",
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
"properties": {
"addressPrefix": "10.60.2.0/24",
"delegations": [],
@ -143,7 +140,7 @@
"type": "Microsoft.Compute/virtualMachines",
"apiVersion": "2023-03-01",
"name": "[parameters('virtualMachines_az104_06_vm0_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic0_name'))]"
],
@ -160,7 +157,7 @@
},
"osDisk": {
"osType": "Windows",
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '_disk1_5e57d096d8d54757b417a168417a69f8')]",
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '_disk1')]",
"createOption": "FromImage",
"caching": "ReadWrite",
"deleteOption": "Detach",
@ -200,7 +197,7 @@
"type": "Microsoft.Compute/virtualMachines",
"apiVersion": "2023-03-01",
"name": "[parameters('virtualMachines_az104_06_vm1_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic1_name'))]"
],
@ -217,7 +214,7 @@
},
"osDisk": {
"osType": "Windows",
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '_disk1_0c60cd0e9f8d43aaaebfa572d1de0319')]",
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '_disk1')]",
"createOption": "FromImage",
"caching": "ReadWrite",
"deleteOption": "Detach",
@ -257,7 +254,7 @@
"type": "Microsoft.Compute/virtualMachines",
"apiVersion": "2023-03-01",
"name": "[parameters('virtualMachines_az104_06_vm2_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkInterfaces', parameters('networkInterfaces_az104_06_nic2_name'))]"
],
@ -274,7 +271,7 @@
},
"osDisk": {
"osType": "Windows",
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '_disk1_58417ddb19d7418886b4b5c42507a7f0')]",
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '_disk1')]",
"createOption": "FromImage",
"caching": "ReadWrite",
"deleteOption": "Detach"
@ -313,7 +310,7 @@
"type": "Microsoft.Compute/virtualMachines/extensions",
"apiVersion": "2023-03-01",
"name": "[concat(parameters('virtualMachines_az104_06_vm0_name'), '/customScriptExtension')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm0_name'))]"
],
@ -332,7 +329,7 @@
"type": "Microsoft.Compute/virtualMachines/extensions",
"apiVersion": "2023-03-01",
"name": "[concat(parameters('virtualMachines_az104_06_vm1_name'), '/customScriptExtension')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm1_name'))]"
],
@ -351,7 +348,7 @@
"type": "Microsoft.Compute/virtualMachines/extensions",
"apiVersion": "2023-03-01",
"name": "[concat(parameters('virtualMachines_az104_06_vm2_name'), '/customScriptExtension')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Compute/virtualMachines', parameters('virtualMachines_az104_06_vm2_name'))]"
],
@ -366,85 +363,13 @@
"protectedSettings": {}
}
},
{
"type": "Microsoft.Network/networkSecurityGroups/securityRules",
"apiVersion": "2023-06-01",
"name": "[concat(parameters('networkSecurityGroups_az104_06_nsg1_name'), '/default-allow-http')]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"properties": {
"protocol": "Tcp",
"sourcePortRange": "*",
"destinationPortRange": "80",
"sourceAddressPrefix": "*",
"destinationAddressPrefix": "*",
"access": "Allow",
"priority": 1100,
"direction": "Inbound",
"sourcePortRanges": [],
"destinationPortRanges": [],
"sourceAddressPrefixes": [],
"destinationAddressPrefixes": []
}
},
{
"type": "Microsoft.Network/networkSecurityGroups/securityRules",
"apiVersion": "2023-06-01",
"name": "[concat(parameters('networkSecurityGroups_az104_06_nsg1_name'), '/default-allow-rdp')]",
"dependsOn": [
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"properties": {
"protocol": "Tcp",
"sourcePortRange": "*",
"destinationPortRange": "3389",
"sourceAddressPrefix": "*",
"destinationAddressPrefix": "*",
"access": "Allow",
"priority": 1000,
"direction": "Inbound",
"sourcePortRanges": [],
"destinationPortRanges": [],
"sourceAddressPrefixes": [],
"destinationAddressPrefixes": []
}
},
{
"type": "Microsoft.Network/virtualNetworks/subnets",
"apiVersion": "2023-06-01",
"name": "[concat(parameters('virtualNetworks_az104_06_vnet1_name'), '/subnet0')]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_az104_06_vnet1_name'))]"
],
"properties": {
"addressPrefix": "10.60.0.0/24",
"delegations": [],
"privateEndpointNetworkPolicies": "Disabled",
"privateLinkServiceNetworkPolicies": "Enabled"
}
},
{
"type": "Microsoft.Network/virtualNetworks/subnets",
"apiVersion": "2023-06-01",
"name": "[concat(parameters('virtualNetworks_az104_06_vnet1_name'), '/subnet1')]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks', parameters('virtualNetworks_az104_06_vnet1_name'))]"
],
"properties": {
"addressPrefix": "10.60.1.0/24",
"delegations": [],
"privateEndpointNetworkPolicies": "Disabled",
"privateLinkServiceNetworkPolicies": "Enabled"
}
},
{
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2023-06-01",
"name": "[parameters('networkInterfaces_az104_06_nic0_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"kind": "Regular",
@ -484,9 +409,9 @@
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2023-06-01",
"name": "[parameters('networkInterfaces_az104_06_nic1_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet1')]",
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"kind": "Regular",
@ -526,9 +451,9 @@
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2023-06-01",
"name": "[parameters('networkInterfaces_az104_06_nic2_name')]",
"location": "eastus",
"location": "[resourceGroup().location]",
"dependsOn": [
"[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]",
"[resourceId('Microsoft.Network/virtualNetworks/', parameters('virtualNetworks_az104_06_vnet1_name'))]",
"[resourceId('Microsoft.Network/networkSecurityGroups', parameters('networkSecurityGroups_az104_06_nsg1_name'))]"
],
"kind": "Regular",
@ -544,7 +469,7 @@
"privateIPAddress": "10.62.0.4",
"privateIPAllocationMethod": "Dynamic",
"subnet": {
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet0')]"
"id": "[resourceId('Microsoft.Network/virtualNetworks/subnets', parameters('virtualNetworks_az104_06_vnet1_name'), 'subnet2')]"
},
"primary": true,
"privateIPAddressVersion": "IPv4"
@ -562,6 +487,7 @@
"nicType": "Standard",
"auxiliaryMode": "None",
"auxiliarySku": "None"
}}
}
}
]
}

View File

@ -32,7 +32,6 @@ There are interactive lab simulations that you might find useful for this topic.
+ Task 2: Configure an Azure Load Balancer.
+ Task 3: Configure an Azure Application Gateway.
## Task 1: Use a template to provision an infrastructure
In this task, you will use a template to deploy one virtual network, one network security group, and two virtual machines.
@ -47,11 +46,11 @@ In this task, you will use a template to deploy one virtual network, one network
1. On the edit template page, select **Load file**.
1. Locate and select the **\\Allfiles\\Lab06\\az104-06-vms-loop-template.json** file and select **Open**.
1. Locate and select the **\\Allfiles\\Lab06\\az104-06-vms-template.json** file and select **Open**.
1. Select **Save**.
1. Select **Edit parameters** and load the **\\Allfiles\\Lab06\\az104-06-vms-loop-parameters.json** file.
1. Select **Edit parameters** and load the **\\Allfiles\\Lab06\\az104-06-vms-parameters.json** file.
1. Select **Save**.
@ -75,15 +74,12 @@ In this task, you will use a template to deploy one virtual network, one network
In this task, you implement an Azure Load Balancer in front of the two Azure virtual machines in the virtual network. Load Balancers in Azure provide layer 4 connectivity across resources, such as virtual machines. Load Balancer configuration includes a front-end IP address to accept connections, a backend pool, and rules that define how connections should traverse the load balancer.
## Architecture diagram - Load Balancer
>**Note**: Notice the Load Balancer is distributing across two virtual machines in the same virtual network.
![Diagram of the lab tasks.](../media/az104-lab06-lb-architecture.png)
1. In the Azure portal, search for and select `Load balancers` and, on the **Load balancers** blade, click **+ Create**.
1. Create a load balancer with the following settings (leave others with their default values) then click **Next: Frontend IP configuration**:
@ -109,7 +105,6 @@ In this task, you implement an Azure Load Balancer in front of the two Azure vir
| Gateway Load Balancer | None |
| Public IP address | Select **Create new** (use the instructions in the next step) |
1. On the **Add a public IP address** popup, use the following settings before clicking **OK** and then **Add**. When completed click **Next: Backend pools**.
| Setting | Value |
@ -174,7 +169,6 @@ In this task, you implement an Azure Load Balancer in front of the two Azure vir
> **Note**: You may need to refresh more than once or open a new browser window in InPrivate mode.
## Task 3: Configure an Azure Application Gateway
In this task, you implement an Azure Application Gateway in front of two Azure virtual machines. An Application Gateway provides layer 7 load balancing, Web Application Firewall (WAF), SSL termination, and end-to-end encryption to the resources defined in the backend pool. The Application Gateway routes images to one virtual machine and videos to the other virtual machine.
@ -240,7 +234,7 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
| Name | `az104-appgwbe` |
| Add backend pool without targets | **No** |
| Virtual machine | **az104-rg6-nic1 (10.60.1.4)** |
| Virtual machine | **az104-rg6-nic2 (10.60.0.4)** |
| Virtual machine | **az104-rg6-nic2 (10.60.2.4)** |
1. Click **Add a backend pool**. This is the backend pool for **images**. Specify the following settings (leave others with their default values). When completed click **Add**.
@ -256,7 +250,7 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
| --- | --- |
| Name | `az104-videobe` |
| Add backend pool without targets | **No** |
| Virtual machine | **az104-rg6-nic2 (10.60.0.4)** |
| Virtual machine | **az104-rg6-nic2 (10.60.2.4)** |
1. Select **Next: Configuration** and then **Add routing rules**. Complete the information.
@ -323,8 +317,6 @@ In this task, you implement an Azure Application Gateway in front of two Azure v
> **Note**: You may need to refresh more than once or open a new browser window in InPrivate mode.
## Key takeaways
Congratulations on completing the lab. Here are the main takeaways for this lab.