1. Name Title Microsoft Windows Azure Virtual Networks

2. Agenda

4. LB VIP: Input Endpoint Internal Endpoint foo.cloudapp.net  VIP

5. LB Load balanced Input Endpoint Internal Endpoints Single Input Endpoint

6. Single Public IP Per Cloud Service

7. LB VM Azure Agent Customer Application Azure Agent Customer Application Role Status

8. LB VM Azure Agent Customer Application Azure Agent Customer Application Role Status

9. Secure Site-to-Site Network Connectivity Windows Azure Virtual Network Data Synchronization SQL Data Sync Application-Layer Connectivity & Messaging Service Bus Secure Machine-to- Machine Connectivity Windows Azure Connect

11. A. Client-server applications using VMsB. Hybrid connectivity with on-premise (DNS on-premise) C. SharePoint with custom DNS (VM) SQL Reporting Service SQL Analysis Service SQL Service Active Directory SQL Service Domain joined to On- Premises Network On-Premises Machine Business Components & Entities On-Premises Machine UI Process Components Web Tier Active Directory Internet VM Role SharePoint FrontEnd VM Role SharePoint FrontEnd VM Role Search and Indes SQL Service VM Role DC DNS VM Role SQL VM Role SQL Local DNS SQL Mirroring LB Open User Access (Website)

12. Who is TestVM2?

19. 10.0.0.10 10.0.0.11 131.57.23.120 10.2.2.0/2410.2.3.0/24 10.2.2.0/2410.2.3.0/24 65.52.249.2210.1.0.410.1.1.4

20. VM Role Business Components & Entities Disk SQL SQL Mirroring Web Role LB

22. IT Admin Network Admin SQLSubnet (10.1.3.0/24) GW IP 65.57.23.45 CorpOffice Network configuration Deployment package

25. Cisco PlatformOS FamilyExamples ASA 5500 Series (Adaptive Security Appliances) ASA Software 8.4+ 5505, 5550 ASR 1000 Series Aggregation Services Routers IOS XE 2.1+1002 ISR Series Integrated Services Routers IOS 12.2+2801, 2901, 2911 Juniper PlatformOS FamilyExamples SRX Series RoutersJunOS 10.2+210, 650 J Series RoutersJunOS 9.4+4350 ISG Series RoutersScreenOS 6.2+SX2 SSG Series RoutersScreenOS 6.2+550 Generic VPN devices must support: IKE v1 AES 128, 256 SHA1, SHA2 Add URL to public list

26. Only single IPsec tunnel supported per Virtual Network Gateway tenant on Azure side has 2 instances (active-passive mode) Only one public IP address for tunnel establishment A pair of VPN devices can be a redundant pair using industry standard protocols HSRP VRRP

28. Virtual NetworkCross-prem connectivity

29. Networks in customers’ premises Virtual Networks in Windows Azure

30. Windows Azure Traffic Manager LB VIP Input Endpoint Internal Endpoints

32. © 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.