This webinar covered Azure VPN options. It began with an overview of Azure VPN gateways and their core services. It then discussed the different types of VPN connections available in Azure, including site-to-site, point-to-site, and VNet peering. The webinar included a demonstration of setting up a site-to-site VPN and discussed considerations around Azure VPN pricing and configurations. Resources for additional information on Azure networking and VPNs were also provided.

1. Need to Know Azure Webinar
June 2018
@directorcia
http://about.me/ciaops

2. Web cast has started
Web cast is being recorded
If you can’t hear anything check
your speaker settings

3. For questions after the event:
Email : director@ciaops.com
Twitter : @directorcia

4. Webinar recordings at:
www.ciaopsacademy.com
Free access for CIAOPS patrons

5. Please:
- Turn off your mobile
- Turn off your email
- Have somewhere to
take notes

6. Questions here

7. http://blog.ciaops.com/2018/06/free-ciaops-yammer-support-network.html

8. How to migrate your SMB business to the Microsoft Cloud – July 2018
Are you puzzled by the best approach to use when migrating a business to Microsoft 365 and
Azure? Are you unsure of which services to use and when? Are you unsure how to cost cloud
solutions? These and all your Microsoft cloud questions will be answered in this full day, face to face
hands on training session. You'll not only learn what products like Microsoft 365 and Azure are,
you'll learn how to effectively price solutions as well as frameworks that you can apply repeatedly to
bring you success with migration, adoption and support. Best of all, you'll see all the products in
action via live demos.
http://blog.ciaops.com/2018/06/new-ciaops-classroom-training.html

9. Agenda
- Azure Update
- Azure VPN options
- Q & A

11. News
• New Azure Security Center Dashboard
• https://blogs.technet.microsoft.com/yuridiogenes/2018/06/18/new-azure-security-center-
dashboard/
• Baseline security policy for AD Admin accounts in preview
• https://cloudblogs.microsoft.com/enterprisemobility/2018/06/22/baseline-security-policy-for-
azure-ad-admin-accounts-in-public-preview/
• How we rebuilt Intune
• https://cloudblogs.microsoft.com/enterprisemobility/2018/06/12/how-we-built-rebuilt-intune-
into-a-leading-globally-scaled-cloud-service/
• Standard SSD disk for Azure VMs
• https://azure.microsoft.com/en-us/blog/preview-standard-ssd-disks-for-azure-virtual-machine-
workloads/
• 3 reasons why Azure’s infrastructure is secure
• https://azure.microsoft.com/en-us/blog/3-reasons-why-azure-s-infrastructure-is-secure/

12. Azure VPN
Options

13. Core Services of Azure IaaS
Compute
Virtual machines
Availability sets
VM scale sets
Storage
Disks
Blob storage
Files
Networking
Virtual networks
VPN, ExpressRoute
Load Balancer
DNS, Traffic Manager
Security &
Management
Log analytics
Backup
Site Recovery
Security Center

14. Azure
On Prem
VMs Backup SQL
VPN Gateway
Site to Site
VPN

15. IPv4 and IPv6 Support
Support for multiple network interfaces for routing and
firewalls
Private and/or Public IP addresses (static or dynamic)
Network Security Groups for traffic isolation
Automatic assignment of DNS servers from virtual
network or from Azure DNS
Accelerated Networking
MAC Persistence

16. Azure
ServerA
VPN
Subnet
On Premises
NewDC
Sync
Gateway

17. Azure VPN Costings

18. Point to Site VPN

19. Local
10.1.0.0/16
Remote
10.1.0.0/16
Server1
ASM VNet ARM VNet
Gateway Subnet
10.1.200.0/29
Gateway Subnet
10.1.200.0/29
Subnet-1
10.1.0.0/24
Subnet-1
10.1.0.0/24
cloudgw
Server1
Azure Resource Manager
Windows 10
Client

20. Site to Site VPN

21. Local
10.1.0.0/16
Server1
ASM VNet
Gateway Subnet
10.1.200.0/29
Subnet-1
10.1.0.0/24
Azure Service Manager

22. Local
10.1.0.0/16
Remote
10.2.0.0/16
Server1
ASM VNet ARM VNet
Gateway Subnet
10.1.200.0/29
Gateway Subnet
10.2.200.0/29
Subnet-1
10.1.0.0/24
Subnet-1
10.2.0.0/24
cloudgw
cloudgwip
Server2
Azure Resource Manager

23. Local
10.1.0.0/16
Remote
10.2.0.0/16
Server1
ASM VNet ARM VNet
Gateway Subnet
10.1.200.0/29
Gateway Subnet
10.2.200.0/29
Subnet-1
10.1.0.0/24
Subnet-1
10.2.0.0/24
cloudgw
cloudgwip
Server2
Site to Site VPN

24. Azure Vnet Peering

25. LAN3
10.3.0.0/16
LAN4
10.4.0.0/16
Server3
ARM VNet ARM VNet
Gateway Subnet
10.2.200.0/29
Subnet-1
10.3.0.0/24
Subnet-1
10.4.0.0/24
Server4
Azure Resource Manage Vnet Peering
Peering
Peering

26. Windows RRAS
Site To Site VPN

27. Local
10.1.0.0/16
RRAS-S2S-Vnet
192.167.0.0/16
Server1
ASM VNet ARM VNet
Gateway Subnet
10.1.200.0/29
Gateway Subnet
192.167.1.0/24
Subnet-1
10.1.0.0/24
default
192.167.0.0/24
RRAS-S2S-VnetGW
Server1
192.167.0.4
Azure
192.168.204.1
RCVM1
[RRAS]
RCVM2
10.0.0.2
10.0.0.1
192.168.204.30
On-Premises

30. Secure site-to-site
VPN connectivity
• Connect to Azure compute
from on-premises or another
Azure region
Secure point-to-site
connectivity
• POC Efforts
• Small scale deployments
• Connect from anywhere
ExpressRoute private
connectivity
• Private connectivity from your
on-premises data center to
Azure virtual networks and
PaaS Services
VNet Peering
within region
• In-region VNet-to-VNet connectivity
• Direct VM-to-VM connectivity
• Peer VNets for routing and transit

31. DEMO

32. Take aways
• Infrastructure connectivity to Azure usually starts with a site
to site VPN
• Azure retain a static IP address while active
• Azure to Azure Vnet peering is also available
• Different VPN plans have different capabilities, check what
you actually need.
• You can always use PowerShell

33. Resources
• Azure VPN Gateway pricing - https://azure.microsoft.com/en-us/pricing/details/vpn-gateway/
• About VPN gateways - https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-
about-vpngateways
• Azure Point Site VPN - https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-
howto-point-to-site-resource-manager-portal
• Vnet to Vnet VPN using PowerShell - https://www.petri.com/create-a-vnet-to-vnet-vpn-using-
azurerm-powershell
• Azure VPN FAQ - https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-vpn-faq
• Create a virtual network with multiple subnets - http://azure.microsoft.com/en-
us/documentation/articles/create-virtual-network/

34. CIAOPS Resources
• Blog – http://blog.ciaops.com
• Free SharePoint Training via email – http://bit.ly/cia-gs-spo
• Free Office 365, Azure Administration newsletter – http://bit.ly/cia-o365-tech
• Free Office 365, Azure video tutorials – http://www.youtube.com/directorciaops
• Free documents, presentations, eBooks – http://slideshare.net/directorcia
• Office 365, Azure, Cloud podcast – http://ciaops.podbean.com
• Office 365, Azure online training courses – http://www.ciaopsacademy.com
• Office 365 and Azure community – http://www.ciaopspatron.com
Twitter
@directorcia
Facebook
https://www.facebook.com/ciaops
Email
director@ciaops.com
Skype for Business
admin@ciaops365.com

35. Get access to the latest
information by becoming a
Patron
http://www.ciaopspatron.com

37. That’s all folks!
Thanks for attending