Azure-Advanced-Networking

M01-Unit 4 Design and implement a Virtual Network in Azure

Exercise scenario

Now you’re ready to deploy virtual networks in the Azure portal.

Consider the fictional organization Contoso Ltd, which is in the process of migrating infrastructure and applications to Azure. In your role as network engineer, you must plan and implement three virtual networks and subnets to support resources in those virtual networks.

Estimated time: 20 minutes

The CoreServicesVnet virtual network is deployed in the East US region. This virtual network will have the largest number of resources. It will have connectivity to on-premises networks through a VPN connection. This network will have web services, databases, and other systems that are key to the operations of the business. Shared services, such as domain controllers and DNS also will be located here. A large amount of growth is anticipated, so a large address space is necessary for this virtual network.

The ManufacturingVnet virtual network is deployed in the West Europe region, near the location of your organization’s manufacturing facilities. This virtual network will contain systems for the operations of the manufacturing facilities. The organization is anticipating a large number of internal connected devices for their systems to retrieve data from, such as temperature, and will need an IP address space that it can expand into.

The ResearchVnet virtual network is deployed in the Southeast Asia region, near the location of the organization’s research and development team. The research and development team uses this virtual network. The team has a small, stable set of resources that is not expected to grow. The team needs a small number of IP addresses for a few virtual machines for their work.

You will create the following resources:

Virtual Network	Region	Virtual network address space	Subnet	Subnet
CoreServicesVnet	East US	10.20.0.0/16
			GatewaySubnet	10.20.0.0/27
			SharedServicesSubnet	10.20.10.0/24
			DatabaseSubnet	10.20.20.0/24
			PublicWebServiceSubnet	10.20.30.0/24
ManufacturingVnet	West Europe	10.30.0.0/16
			ManufacturingSystemSubnet	10.30.10.0/24
			SensorSubnet1	10.30.20.0/24
			SensorSubnet2	10.30.21.0/24
			SensorSubnet3	10.30.22.0/24
ResearchVnet	Southeast Asia	10.40.0.0/16
			ResearchSystemSubnet	10.40.0.0/24

These virtual networks and subnets are structured in a way that accommodates existing resources yet allows for projected growth. Let’s create these virtual networks and subnets to lay the foundation for our networking infrastructure.

In this exercise, you will:

• Task 1: Create the Contoso resource group
• Task 2: Create the CoreServicesVnet virtual network and subnets
• Task 3: Create the ManufacturingVnet virtual network and subnets
• Task 4: Create the ResearchVnet virtual network and subnets
• Task 5: Verify the creation of VNets and Subnets

Task 1: Create the Contoso resource group

1. Go to Azure portal.

2. On the home page, under Azure services, select Resource groups.

3. In the Resource groups, select + Create.

4. Use the information in the following table to create the resource group.

Tab	Option	Value
Basics	Resource group	ContosoResourceGroup
	Region	(US) East US
Tags	No changes required
Review + create	Review your settings and select Create

1. In Resource groups, verify that ContosoResourceGroup appears in the list.

Task 2: Create the CoreServicesVnet virtual network and subnets

1. On the Azure portal home page, navigate to the Global Search bar and search Virtual Networks and select virtual networks under services.
2. Select Create on the Virtual networks page.
3. Use the information in the following table to create the CoreServicesVnet virtual network.
   ‎Remove or overwrite the default IP Address space

Tab	Option	Value
Basics	Resource Group	ContosoResourceGroup
	Name	CoreServicesVnet
	Region	(US) East US
IP Addresses	IPv4 address space	10.20.0.0/16

1. Use the information in the following table to create the CoreServicesVnet subnets.

2. To begin creating each subnet, select + Add subnet. To finish creating each subnet, select Add.

Subnet	Subnet Template	Option	Value
GatewaySubnet	Virtual Network Gateway	Subnet name	GatewaySubnet (default)
		Subnet address range	10.20.0.0/27
SharedServicesSubnet	Default	Subnet name	SharedServicesSubnet
		Subnet address range	10.20.10.0/24
DatabaseSubnet	Default	Subnet name	DatabaseSubnet
		Subnet address range	10.20.20.0/24
PublicWebServiceSubnet	Default	Subnet name	PublicWebServiceSubnet
		Subnet address range	10.20.30.0/24

1. To finish creating the CoreServicesVnet and its associated subnets, select Review + create.

2. Verify your configuration passed validation, and then select Create.

3. Repeat steps 1 -8 for each VNet based on the tables below

Task 3: Create the ManufacturingVnet virtual network and subnets

Tab	Option	Value
Basics	Resource Group	ContosoResourceGroup
	Name	ManufacturingVnet
	Region	(Europe) West Europe
IP Addresses	IPv4 address space	10.30.0.0/16

Subnet	Subnet Template	Option	Value
ManufacturingSystemSubnet	Default	Subnet name	ManufacturingSystemSubnet
		Subnet address range	10.30.10.0/24
SensorSubnet1	Default	Subnet name	SensorSubnet1
		Subnet address range	10.30.20.0/24
SensorSubnet2	Default	Subnet name	SensorSubnet2
		Subnet address range	10.30.21.0/24
SensorSubnet3	Default	Subnet name	SensorSubnet3
		Subnet address range	10.30.22.0/24

Task 4: Create the ResearchVnet virtual network and subnets

Tab	Option	Value
Basics	Resource Group	ContosoResourceGroup
	Name	ResearchVnet
	Region	Southeast Asia
IP Addresses	IPv4 address space	10.40.0.0/16

Subnet	Subnet Template	Option	Value
ResearchSystemSubnet	Default	Subnet name	ResearchSystemSubnet
		Subnet address range	10.40.0.0/24

Task 5: Verify the creation of VNets and Subnets

1. On the Azure portal home page, select All resources.

2. Verify that the CoreServicesVnet, ManufacturingVnet, and ResearchVnet are listed.

3. Note that Azure creates NetworkWatchers for each region that you use.

4. Select CoreServicesVnet.

5. In CoreServicesVnet, under Settings, select Subnets.

6. In CoreServicesVnet

   Subnets, verify that the subnets you created are listed, and that the IP address ranges are correct.

   

7. Repeat steps 4 -6 for each VNet.

Congratulations! You have successfully created a resource group, three VNets, and their associated subnets.

Note: Do not delete the Networks: You will need them in the next LAB exercise