WEBVTT

1
00:00.000 --> 00:06.950
So the first thing we want to do as we're configuring our Azure environment is

2
00:06.950 --> 00:07.560
to create

3
00:07.560 --> 00:14.280
that vnet and the necessary subnets to support our VPN as well as our server.

4
00:14.280 --> 00:17.680
So what we're going to need for this of course is one vnet we could use more

5
00:17.680 --> 00:18.360
than one,

6
00:18.360 --> 00:22.120
but we're just going to use one vnet and we're going to create those two subn

7
00:22.120 --> 00:22.600
ets.

8
00:22.600 --> 00:26.610
Now one of them is going to be a normal subnet and the other one is going to be

9
00:26.610 --> 00:27.280
dedicated

10
00:27.280 --> 00:29.320
for our virtual gateway.

11
00:29.320 --> 00:32.280
You'll see how this works as we go through the process.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

11
00:29.320 --> 00:32.280
You'll see how this works as we go through the process.

12
00:32.280 --> 00:36.090
So let's go ahead and jump in to the Azure main menu and get started with

13
00:36.090 --> 00:36.880
configuring

14
00:36.880 --> 00:39.840
our components.

15
00:39.840 --> 00:44.390
So just a quick note as we get started here notice that we do in fact have this

16
00:44.390 --> 00:45.080
resource

17
00:45.080 --> 00:49.910
group that I mentioned before called SD WAN and that is what we are going to be

18
00:49.910 --> 00:50.640
building

19
00:50.640 --> 00:52.920
all of our objects in.

20
00:52.920 --> 00:57.380
If we were to click on that real quick notice that this doesn't have anything

21
00:57.380 --> 00:58.400
in it except

22
00:58.400 --> 01:04.820
for an SSH key that I do have prebuilt for assigning to things like routers and
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

22
00:58.400 --> 01:04.820
for an SSH key that I do have prebuilt for assigning to things like routers and

23
01:04.820 --> 01:05.600
Linux machines

24
01:05.600 --> 01:10.040
and so on that way I have my security key already created.

25
01:10.040 --> 01:13.600
However other than that it's a blank resource group.

26
01:13.600 --> 01:18.000
So what we want to do is get started here by creating our virtual network.

27
01:18.000 --> 01:22.200
So for this we'll come over here to virtual networks.

28
01:22.200 --> 01:24.640
Notice that we don't currently have one.

29
01:24.640 --> 01:28.100
So we can either click this big blue box here in the middle that says create

30
01:28.100 --> 01:29.440
virtual network

31
01:29.440 --> 01:33.560
or if we want we can just come up here and hit create up top.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

31
01:29.440 --> 01:33.560
or if we want we can just come up here and hit create up top.

32
01:33.560 --> 01:37.600
Either way it's going to come up with this create virtual network screen.

33
01:37.600 --> 01:40.740
So the first thing we have to do if you have more than one subscription is

34
01:40.740 --> 01:41.480
choose your

35
01:41.480 --> 01:42.480
subscription.

36
01:42.480 --> 01:47.320
I don't I just have one so Azure subscription one is going to be fine.

37
01:47.320 --> 01:50.120
Then we want to choose the resource group.

38
01:50.120 --> 01:54.190
Now this network watcher resource group that it's defaulting to this is

39
01:54.190 --> 01:54.920
something that

40
01:54.920 --> 02:00.620
Azure creates automatically once you start firing up certain components and so
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

40
01:54.920 --> 02:00.620
Azure creates automatically once you start firing up certain components and so

41
02:00.620 --> 02:00.840
on.

42
02:00.840 --> 02:03.480
So this again just sort of exists.

43
02:03.480 --> 02:05.840
This is not something we generally want to use.

44
02:05.840 --> 02:10.900
We want to use the one that we created and again in my case that's SD when you

45
02:10.900 --> 02:11.200
'll of

46
02:11.200 --> 02:17.040
course want to choose whichever resource group you created for this project.

47
02:17.040 --> 02:20.560
The next thing we want to do is give the virtual network a name.

48
02:20.560 --> 02:25.120
Now we're just creating one so it doesn't have to be anything super fancy.

49
02:25.120 --> 02:27.920
We'll just in fact call it vnet-1.

50
02:27.920 --> 02:29.640
It doesn't really matter what we name it.

51
02:29.640 --> 02:32.880
You can of course name it something more descriptive if you want.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

51
02:29.640 --> 02:32.880
You can of course name it something more descriptive if you want.

52
02:32.880 --> 02:37.030
And then under region you'll want to choose whatever region is best for where

53
02:37.030 --> 02:37.880
you are in

54
02:37.880 --> 02:39.160
the world.

55
02:39.160 --> 02:44.290
In my case East US is the most appropriate region and it's defaulting to that

56
02:44.290 --> 02:44.960
because

57
02:44.960 --> 02:49.520
of course I have deployed devices into that region previously.

58
02:49.520 --> 02:54.210
If that wasn't chosen automatically you would have to choose the correct region

59
02:54.210 --> 02:54.400
here.

60
02:54.400 --> 02:58.000
Once everything here is correct we'll go ahead and hit next.

61
02:58.000 --> 03:02.800
This is going to bring up security features such as network encryption,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

61
02:58.000 --> 03:02.800
This is going to bring up security features such as network encryption,

62
03:02.800 --> 03:03.680
enabling Azure

63
03:03.680 --> 03:09.830
Bastion, enabling the firewall and Azure DDoS or distributed denial of service

64
03:09.830 --> 03:10.520
network

65
03:10.520 --> 03:11.760
protection.

66
03:11.760 --> 03:15.800
If you want any of these you would go ahead and choose them at this point.

67
03:15.800 --> 03:20.250
This being a lab environment we're not going to be focusing here on security

68
03:20.250 --> 03:20.840
but of course

69
03:20.840 --> 03:25.180
these are things you may want in a production network if that's what you're

70
03:25.180 --> 03:26.080
deploying.

71
03:26.080 --> 03:29.520
We're going to leave these blank and go ahead and hit next.

72
03:29.520 --> 03:34.480
Here is where we need to configure our network range and our different subnets.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

72
03:29.520 --> 03:34.480
Here is where we need to configure our network range and our different subnets.

73
03:34.480 --> 03:38.200
So the first thing we want to do is define our address space.

74
03:38.200 --> 03:42.680
As I mentioned during our game plan the overall address space here is going to

75
03:42.680 --> 03:47.280
be 10.30.0.0/16.

76
03:47.280 --> 03:49.160
Then we need subnets.

77
03:49.160 --> 03:55.790
Now if we take a look here it's already created a default subnet at a.0 in the

78
03:55.790 --> 03:57.000
3rd octet.

79
03:57.000 --> 04:01.240
So this 10.30.0/24.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

79
03:57.000 --> 04:01.240
So this 10.30.0/24.

80
04:01.240 --> 04:03.400
Now we're not going to use that.

81
04:03.400 --> 04:07.520
We could use it if we wanted to but that's not what was on our game plan.

82
04:07.520 --> 04:12.400
So we can either leave this default here and not use it or you could do what I

83
04:12.400 --> 04:13.000
'm going

84
04:13.000 --> 04:18.710
to do which is simply come over here, hit the little delete icon and get rid of

85
04:18.710 --> 04:19.040
it.

86
04:19.040 --> 04:22.120
Then we're going to add our own subnet.

87
04:22.120 --> 04:26.280
Notice that the subnet purpose is going to default.

88
04:26.280 --> 04:29.920
We're going to leave that but we're going to see that for our next subnet we're

89
04:29.920 --> 04:30.200
going
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

89
04:29.920 --> 04:30.200
going

90
04:30.200 --> 04:31.960
to need to change that.

91
04:31.960 --> 04:35.240
The name however we probably don't want to leave it called default.

92
04:35.240 --> 04:39.200
We're going to call ours subnet 10.

93
04:39.200 --> 04:42.000
Then we're going to tell it the address space.

94
04:42.000 --> 04:47.740
Now the first section here is the IPv4 address range which is the overall range

95
04:47.740 --> 04:48.880
for this entire

96
04:48.880 --> 04:50.760
virtual network.

97
04:50.760 --> 04:56.010
What we need to change is the starting address for this particular subnet and

98
04:56.010 --> 04:57.000
we want this

99
04:57.000 --> 05:00.040
to start at .10.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

99
04:57.000 --> 05:00.040
to start at .10.

100
05:00.040 --> 05:05.040
So this is going to be .10 in the third octet making the overall subnet 10.

101
05:05.040 --> 05:11.000
30.10.0 and then of course the size here is a slash 24.

102
05:11.000 --> 05:15.760
Now if we scroll down there are a few other things we could configure.

103
05:15.760 --> 05:19.830
We could configure if this is a private subnet and technically we could turn

104
05:19.830 --> 05:20.920
this on.

105
05:20.920 --> 05:24.720
We see that it is actually on by default and that's going to be fine for this

106
05:24.720 --> 05:25.200
design.

107
05:25.200 --> 05:30.880
It just means that that subnet cannot go directly to the internet on its own.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

107
05:25.200 --> 05:30.880
It just means that that subnet cannot go directly to the internet on its own.

108
05:30.880 --> 05:35.150
And since our goal here is simply to be able to have our workstation at

109
05:35.150 --> 05:36.680
headquarters ultimately

110
05:36.680 --> 05:41.820
talked to a server deployed into this subnet it actually doesn't need outside

111
05:41.820 --> 05:42.600
access.

112
05:42.600 --> 05:46.800
If you wanted this subnet to go directly to the internet and not have to be

113
05:46.800 --> 05:47.480
routed out

114
05:47.480 --> 05:51.490
through headquarters to get to the internet then you would want to turn this

115
05:51.490 --> 05:52.400
off and allow

116
05:52.400 --> 05:56.440
this subnet to have outbound access to the internet.

117
05:56.440 --> 06:00.590
In this particular environment it doesn't really matter we can either leave
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

117
05:56.440 --> 06:00.590
In this particular environment it doesn't really matter we can either leave

118
06:00.590 --> 06:01.520
this on or turn

119
06:01.520 --> 06:02.920
this off.

120
06:02.920 --> 06:05.770
Further things down here of course we could configure things that could not

121
06:05.770 --> 06:06.480
gateway network

122
06:06.480 --> 06:11.000
security groups, route tables and so on.

123
06:11.000 --> 06:14.520
Ultimately we are going to need a route table but that route table is going to

124
06:14.520 --> 06:15.000
point to

125
06:15.000 --> 06:19.980
our VPN gateway which doesn't exist yet so we can't exactly build that route

126
06:19.980 --> 06:20.760
table yet

127
06:20.760 --> 06:22.680
but we'll get back to it.

128
06:22.680 --> 06:26.140
In this case this is all we really need to configure for this subnet so let's

129
06:26.140 --> 06:26.920
go ahead and hit

130
06:26.920 --> 06:33.840
add and then we need to add our subnet for the virtual network gateway.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

130
06:26.920 --> 06:33.840
add and then we need to add our subnet for the virtual network gateway.

131
06:33.840 --> 06:37.670
So let's go ahead and add another subnet and this is where we need to change

132
06:37.670 --> 06:38.440
this subnet

133
06:38.440 --> 06:39.920
purpose.

134
06:39.920 --> 06:44.440
Notice one of the purposes is a virtual network gateway.

135
06:44.440 --> 06:47.760
This is where we're going to put the virtual network gateway which is where the

136
06:47.760 --> 06:48.080
VPN's

137
06:48.080 --> 06:49.280
terminate.

138
06:49.280 --> 06:53.970
So let's go ahead and select that and notice that immediately the name field

139
06:53.970 --> 06:55.120
goes away

140
06:55.120 --> 06:58.040
and it just becomes gateway subnet.

141
06:58.040 --> 07:00.600
Now this implies two things.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

141
06:58.040 --> 07:00.600
Now this implies two things.

142
07:00.600 --> 07:05.200
One we can't name this subnet so it's going to be called gateway subnet.

143
07:05.200 --> 07:08.670
The other thing is you can't have more than one because if I tried to create

144
07:08.670 --> 07:09.520
another one

145
07:09.520 --> 07:13.800
it would call it gateway subnet and it would say that one already exists and

146
07:13.800 --> 07:14.120
that's

147
07:14.120 --> 07:19.260
fine because we really only need one virtual network gateway per virtual

148
07:19.260 --> 07:20.200
network.

149
07:20.200 --> 07:25.070
Now in this case notice it's actually defaulting to making this at .9 and

150
07:25.070 --> 07:26.200
honestly it probably

151
07:26.200 --> 07:30.120
doesn't really matter but I'm going to put it at .1.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

151
07:26.200 --> 07:30.120
doesn't really matter but I'm going to put it at .1.

152
07:30.120 --> 07:33.730
We're never actually really going to see this subnet range so it sort of doesn

153
07:33.730 --> 07:34.160
't really

154
07:34.160 --> 07:38.850
matter what it's set to and the other settings you'll want to leave it there

155
07:38.850 --> 07:39.680
defaults just

156
07:39.680 --> 07:41.640
go ahead and hit add.

157
07:41.640 --> 07:47.260
So now we have our two subnets configured specifically subnet 10 for our server

158
07:47.260 --> 07:48.080
and the gateway

159
07:48.080 --> 07:52.490
subnet for our virtual network gateway which again we didn't really get a

160
07:52.490 --> 07:53.440
chance to name

161
07:53.440 --> 07:56.600
or anything that is what it has to be called.

162
07:56.600 --> 08:00.990
Now the other things we could say if we hit next would be the tags we don't
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

162
07:56.600 --> 08:00.990
Now the other things we could say if we hit next would be the tags we don't

163
08:00.990 --> 08:01.480
really need

164
08:01.480 --> 08:05.800
to configure tags so we can just go right to review and create.

165
08:05.800 --> 08:08.940
This is now going to give us a summary of what it's going to create as long as

166
08:08.940 --> 08:09.560
everything

167
08:09.560 --> 08:14.480
here looks correct which it does will go ahead and hit create.

168
08:14.480 --> 08:18.480
So this only takes a few seconds it says your deployment is complete let's go

169
08:18.480 --> 08:18.880
ahead and

170
08:18.880 --> 08:23.560
click on go to resource this will take us to that resources main page.

171
08:23.560 --> 08:27.790
We see here on the overview page that everything looks correct and of course if

172
08:27.790 --> 08:28.400
we would have

173
08:28.400 --> 08:33.620
come over here and click on subnets we see that our two subnets here are
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

173
08:28.400 --> 08:33.620
come over here and click on subnets we see that our two subnets here are

174
08:33.620 --> 08:36.520
deployed as needed.

175
08:36.520 --> 08:42.930
So in this video we created our vnet to handle the overall address space of 10.

176
08:42.930 --> 08:44.240
30.0.

177
08:44.240 --> 08:50.870
Then we created our subnet 10 specifically for our servers covering the 10.30.

178
08:50.870 --> 08:53.520
10.0/24 subnet

179
08:53.520 --> 08:58.310
and then of course we created our gateway subnet which we don't get to name it

180
08:58.310 --> 08:58.880
just gets

181
08:58.880 --> 09:04.350
its default name and that is going to be used of course for the virtual gateway
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

181
08:58.880 --> 09:04.350
its default name and that is going to be used of course for the virtual gateway

182
09:04.350 --> 09:04.400
.

183
09:04.400 --> 09:08.690
The next thing we have to do is actually deploy that virtual gateway as well as

184
09:08.690 --> 09:09.200
a local

185
09:09.200 --> 09:13.160
gateway that we're going to be using to build the VPN.

186
09:13.160 --> 09:15.280
So that's what we're going to do in the next video.

187
09:15.280 --> 09:25.280
[BLANK_AUDIO]