(zealous music)
- (David Elfassy) Now let's go ahead and start creating
some Azure virtual networking resources.
And the first one bears its name,
an Azure virtual network.
An Azure virtual network is really
an isolated network segment that lives in the cloud
or in this case in Azure.
So to create an Azure virtual network,
I'm going to click on create a resource,
and I'm actually going to make a search for it.
So this is a Azure virtual network.
I'm going to press enter.
And the first one that pops up
is my virtual network service.
So I'm going to click on that and I have a little description
of what an Azure virtual network is.
And I'm going to click on create.
So let's go through the various configuration options
that are available in the creation process
of the virtual network.
First, I need to specify the subscription
and the resource group
where this virtual network will reside.
So for the purpose of this course,
I'm going to create a new resource group
that is going to be used to host all of the resources
that I will create.
The purpose of that is that once I'll be done
with this course, I'll be able to go ahead,
and delete the resource group,
including all the resources in that resource group.
So, I'm going to call it NetworkingCourse and click on okay.
So this is creating a new resource group.
I'm going to give a name for my virtual network.
So I'm going to call this Vnet10.
And I'm going to specify my region.
So the region is again,
the location where the virtual network
will reside as a resource.
This can have some impact,
that's for other resources in the future
may only be able to interact
if the virtual network is in the same region.
So, planning your region is something that's important
when you create your resources.
You should know that East US and East US 2
are probably the most used regions in Azure.
And sometimes they get full.
As we saw at the beginning of the COVID pandemic
in early 2020.
Some of these resources were full,
and could not accept new resources.
So I'm actually going to pick Central US
and click on next.
Next is what I get to specify the IP addresses
that are used in my virtual network.
Specifically, I'm going to have an IP address range
or an IP address space.
The range of IP addresses in my virtual network
are defined by this address space.
And I can have multiple IP address spaces,
if I would like to.
This is a default that gets created for me.
You see it here and it's CIDR notation,
and it's translated to 10.1.00
all the way to 10.1.255.255
which includes over 65,000 addresses.
These IP addresses are iPv4.
I can also add an iPv6 address base,
if I would like to use iPv6 for this segment.
For this virtual network
I'm only going to use IP addresses
in the iPv4 address space of 10.1.X.X.
And you see here that I have
also a virtual network subnet that's created.
So each virtual network
needs to contain at least one address space,
and at least one subnet.
I can add additional subnets if I want to.
This one is a default subnet
which uses the 10.1.0.0/24 CIDR notation,
basically a subsection of this address space.
You must have subnets that are contained inside
of your address space in your virtual network.
I'm going to click next.
And now, I'm presented with three options
of additional services that I can install
in my subscription or deploy to my subscription.
Now, these buttons of disabled enable
are a little bit misleading,
because when you click on enable on any one of them,
you have to provide all the details to actually publish
or deploy a bastion host.
The bastion host is a tool that you will use to secure RDS
or remote desktop connections to your virtual machines
that may be hosted directly in this virtual network.
And you'll be able to do that without a public IP address.
A DDoS protection resource is used
to protect you from DDoS attacks.
And a firewall is a resource we'll talk about in depth,
later on in this course.
The Azure firewall service provides firewall functionality
to your virtual network.
Again, if I click on enable here,
it will prompt me to provide the information
for this Azure firewall.
And that would create an Azure firewall resource.
Note that all of these resources
have costs associated to them.
The virtual network that I'm creating now
does not have any costs associated to it.
So I'm going to click on next which is the tags option.
Here's where I would be able to specify a tag.
The tags are used to organize all of my resources
inside of my Azure subscription.
And then I'm going to click next.
And the deployment starts.
Now note that the validation here has been done.
It's verified that everything that I've specified
in my deployment is actually correct.
And I can click on create to push the deployment
through to my subscription.
So this is actually a deployment that's going
into my Azure subscription.
It's in progress,
and within a couple of minutes my deployment will complete,
and I'll be able to use this virtual network.
And now my deployment is complete.
(zealous music)