1. Microsoft Virtual Academy
11/23/2018
Microsoft Virtual Academy
Free, online, technical courses
Take a free online course.
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Windows Server Management Marketing
11/23/2018
Microsoft Azure – Site to Site VPN Aleksandar Đorđević Microsoft Technical Evangelist Predrag Jelesijević Microsoft Most Valuable Professional
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Module 1: Microsoft Azure Network – Quick Overview

4. Module objectives Azure networks basics
local networks
gateway resources
gateway servers
Understand objects related to site-to-site VPN.

5. Microsoft Azure Virtual Networks
Secure, Isolated Virtual Networks
Hybrid, Cross-Premises Networking
Bring Your Own DNS
Site-to-Site VPN
Point-to-Site VPN
Networking
Compute
Storage
Virtual Machine
Operating System
Applications
Data & Access
Runtime
Provision

6. Virtual Network Features
Customer-managed private virtual networks within Windows Azure
“Bring your own IPv4 addresses”
Control over placement of Windows Azure Roles within the network
Stable IPv4 addresses for VMs
Hosted VPN Gateway enables site-to-site connectivity
Automated provisioning & management
Support existing on-premises VPN devices
Use on-premise DNS servers for name resolution
Enables customers to use their on-premise DNS servers for name resolution
Enables VMs running in Windows Azure to be joined to corporate domains running on-premise (use your on-premise Active Directory)

7. Azure Virtual Networks – do I need it?

8. vNet’s within Azure Cloud Service VIP- 137.135.64.110 DIP-192.168.1.7
Subnet1
Subnet2
VM1
DIP
Web server
VM2
DIP
SQL Server

9. Connectivity in Azure Input Endpoint Internal Endpoint
foo.cloudapp.net  VIP
Load balanced endpoint. Stable VIP per cloud service.
Single port per endpoint
Supported protocols: HTTP, HTTPS, TCP
Input Endpoint
VIP: Input Endpoint LB
Instance-to-instance communication
Supported Protocols: TCP, UDP
Port ranges supported
Communication boundary = Deployment boundary
Internal Endpoint
DIP’s

10. VIPS and DIPS VIP – Virtual IP address DIP – Dynamic IP address
An internet-facing IP address that is not bound to a specific computer or network interface card.
The cloud service that the VM sits within is assigned the VIP.
You can have multiple VMs in a cloud service. They share the same VIP.
DIP – Dynamic IP address
This IP address is dynamically assigned (via DHCP) to your virtual machine by Windows Azure. You rely on DHCP – Do NOT statically configure your IP address. Even for DCs.
The IP address lease directly equates to the lifetime of the VM.
If you create a virtual network, the VM will receive its DIP from that range.

11. Hardware VPN or Windows RRAS
Build 2012
11/23/2018
S2S Virtual Network
On-premises
Windows Azure
Virtual Network
<subnet 1>
<subnet 2>
<subnet 3>
Hardware VPN or Windows RRAS
DNS Server
Your datacenter
Site-to-Site VPN
VPN Gateway
VPN Gateway
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Options for On-Premises VPN Gateways
Build 2012
11/23/2018
Options for On-Premises VPN Gateways
New: Software based
VPN gateway
Windows Server
Routing and Remote Access Service (RRAS)
Generic VPN devices must support
IKE v1, IKE v2
AES 128, 256
SHA1, SHA2
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Requirements for dynamic VPN gateways
Property
Static Routing VPN gateway
Dynamic Routing VPN gateway
Site-to-Site connectivity (S2S)
Policy-based VPN configuration
Route-based VPN configuration
Point-to-Site connectivity (P2S)
Not supported
Supported (Can coexist with site-to-site connectivity)
Authentication method
Pre-shared key
Pre-shared key for site-to-site connectivity
Certificates for point-to-site connectivity
Maximum Number of Site-to-Site (S2S) connections 1 10
Maximum Number of Point-to-Site (P2S) connections
128
Active Routing Support (BGP)

14. vNet’s – key things to have in mind
Azure + on premise services working together – you need to create/have vNet’s
Extend On premise Data center to Azure, S2S VPN – you need to create/have vNet’s
If you plan to have Azure to Azure Cloud Services communication – you need to create/have vNet

15. TechNet Virtual Labs
Deep technical content and free product evaluations
Hands-on deep technical labs
Free, online, technical courses
At the TechNet Evaluation Center you can download free, trial versions of Microsoft software, with no feature limits. Dozens of trials are available – all at no cost.
Try Windows Server 2012 R2 for up to 180 days. Download the Windows 8.1 Enterprise 90-day evaluation. Or try Windows Azure at no-cost for up to 90 days.
Microsoft Hands On Labs offer virtual environments that will take you through guided, technically deep product learning experience.
Learn at your own pace in labs that you can complete in 90 minutes or less. There is no complex setup or installation is required to use TechNet Virtual Labs.
Microsoft Virtual Academy provides free online training on the IT scenarios that are important to your company and your career.
Learn at your own pace and boost your IT skills with over 100 courses across more than 15 Microsoft technologies including Windows Server, Windows 8, Windows Azure, Office 365, virtualization, Windows Phone, and more.
Download Microsoft software trials today.
Find Hand On Labs.
Take a free online course.
Technet.microsoft.com/evalcenter
Technet.microsoft.com/virtuallabs
microsoftvirtualacademy.com

16. 11/23/2018 3:49 PM
© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.