AZ-102 Study notes - Part 3

-
Continued from a previous series:

Configure and manage virtual networks (15-20%)

Create connectivity between virtual networks

Create and configure VNET peering

Vnet peering is private peering across region or subscriptions but not tenants. 10 per vnet by default, but up to 50.

 Via Powershell:
Add-AzureRmVirtualNetworkPeering / 
az network vnet peering create
 Create and configure VNET to VNET

Vnet to Vnet connections require public IPs
Only Vnets in the same subscription from the portal.
Add connection under the VNet.
Use the New-AzureRMVirtualNetworkGatewayConnection CMDlet to setup via Powershell.


Verify virtual network connectivity

Get-AzureRmVirtualNetworkGatewayConnection
az network vpn-connection show

 Network Watcher Agent extenion.

 Flow Logs require NGS rules, a log analytics work-space and a storage account.

 Create virtual network gateway

Requires a DYNAMIC public IP address.
Review the SKUs noted in the documentation for gateway:
Basic SKU- Max 10 tunnels, others max 30. 
VPNGw1,2,3 support P2S IKEv2 connection and BGP and each have bandwidth higher then the last.

Configure name resolution

Configure Azure DNS 

Create a new DNS zone from the marketplace or use the powershell commands:

New-AzureRmDNS zone
New-AzureRMDnsRecordSet


Configure custom DNS settings 

Alias records dynamically update if they change in Azure.

Configure DNS zones

DNS zones contain one or more records for a domain.


Comments

Post a Comment

Popular posts from this blog

Azure - Check Invitation Status to guest user

-
Image
Often times you will need to invite a 3rd party to your Azure AD tenant to support your environment. When you add them to a resource, they will automatically be invited as a guest user in your Azure AD tenant, however they won't be able to access this until they accept the invitation email. If you send an invite to a guest user you can see if they have accepted the invitation or not. You also have the option to resend the invitation. From Azure AD you can search for guest users and drill down into an individual one. Here is what the email looks like - the key here is the email comes from " [email protected] " because it can be sent on behalf of this may end up in the junk or spam email folder, so be sure to have them check there.
Read more

Advice for breaking into the DevOps field

-
 A former co-worker reached out a few weeks ago and was looking for advice to give to his son who was about to Graduate and looking to break into the DevOps field. Here is the advise I gave, specifically around the Chicago market: A few years ago I read "The Phoenix Project" and that really got me to focus on changing my career trajectory. I think it's a great explanation of some of the fundamentals of the DevOps philosophy without being too dry. I can't recommend it enough. Skills wise - automation is going to the be the key thing to focus on and it's not going away anytime soon. Tools like Ansible & Terraform are really great to spend time with. Depending on what his dream job is, I would look up and start to focus on the skills required to get there. For example, if he's interested in working for Google, he'd probably want to put some time in to learn Golang, Kubernetes, etc. I think the most important thing is to network, if he plans on staying in ...
Read more

Blogs for Azure Information

-
Here are some of the blogs that I follow for information around new features in Azure, OMS, Log Analytics, Azure Monitor, etc. Azure Monitoring Services Health Status https://blogs.msdn.microsoft.com/servicemap-status/ Microsoft Azure Roadmap https://azure.microsoft.com/en-us/roadmap/ System Center Me http://systemcenterme.com/ Quae Nocent Docent (Great weekly OMS, SCOM, and Azure Info) https://nocentdocent.wordpress.com/ Operations Management Suite Blog https://blogs.technet.microsoft.com/msoms/
Read more