The Deployment Bunny

OS Deployment, Virtualization, Microsoft based Infrastructure…

  • Archives

  • Meta

Archive for the ‘Azure’ Category

Demo Scripts from the TrueSec Azure Event is here

Posted by Mikael Nystrom on April 12, 2016

Here is all the scripts that we used to build and demo Azure at Rival, Stockholm on the 4th of Mars 2016

https://github.com/DeploymentBunny/DemoScript/tree/master/2016-04-06%20-%20TrueSec%20Azure%20Summit

image

for more info about the event : http://events.truesec.se/Event/Super_Combo

/mike

Posted in Azure, Event, PowerShell | Tagged: , , | Leave a Comment »

Beyond Supported – Azure Site-2-Site VPN (with physical router) behind a NAT device

Posted by Mikael Nystrom on February 2, 2015

Last week at TechXAzure I did 3 sessions, during on of them we did some demos around Azure Site-2-Site VPN which is the fundamental connection to create a Hybrid solution. In production that is not really a complex task since the firewall that is used is directly connected to the Internet with a static IP, but that is usually not the case when you play around at home or in the LAB. Running behind a NAT:ed device is not supported, neither is running the solution on a dynamically assign IP, but it works…

So, the idea behind this guide is to give a fairly simple step-by-step guide to build a site-2-site VPN connection to the Azure IaaS service for you to play with at home or in a LAB, just remember, there is NO support for this at all!

The design

Looking at the picture you can see that we basically have two networks, one for the normal traffic and one more that is behind a second router. Behind that network we have access to Azure directly. For me this is perfect when playing around. The “normal network act as the workload network, that is where all normal traffic exists. The network behind the second router act as the fabric network, here is where my Private Cloud cloud is running. Note, this is just for LAB, Testing, Playing and such things. You should not use this for production since it is unsupported.

Hardware:

The Internet facing router is a Linksys EA6900

The Internal router between the normal network and internal Azure Site-2-Site router is a NETGEAR FVS318N

image

Create Networks in Azure

Logon to your Azure Account and create the Local network

image
Select Local Network.

image
Give it a name and type in your Internet facing IP.

image
Type in the IP address range your are going to use behind the second router.

Logon to your Azure Account and create the Virtual network

image
Select to create a Custom network

image
Give the network a name and assign it to a Azure location.

image
Type in the DNS servers you are going to have locally on your network and select Site-2-Site VPN. Note: If you also select Point-2-Site you cannot create a Virtual Router in Azure that supports IKEv1, the router I’m using does not support it, it only supports IKEv1 and there for I cannot have Point-2-Site VPN.

image
Add the IP address range and gateway range for your virtual network in Azure.

Create the Router

When the network has been created you need to create the Virtual Router

image
In the Azure portal, click on the Virtual Network “FabricAzure” You can either create a Static or a Dynamic router and you need to select the version based on the router/firewall you have locally. In my case I use a NetGear FVS318N and the features in that router requires my to configure the virtual router as a static router.

image

This takes time, have lunch or something

image
Finally its done.

Configure the Internet facing Router

imageimage
To allow traffic from the Virtual Router in Azure to correctly receive data you need to redirect traffic, the easy way to do this is to use the DMZ function in the Internet facing router. This way, all traffic from that IP will be redirected to the second router.

Configure the second router on your network (not the Internet facing)

image

In this case it is a NETGEAR FVS318N and the easy thing is to run the Wizard for VPN and then modify the settings, but before you do that, we need the PreShared Key and you can get that in the Azure Portal.

image
Modify the IKE Policy in the Second router.

image
Modfy the VPN Policy in the second router

image

Wait, check logs, wait, check logs and…

image

/Happy Routing…

Posted in Azure, Fabric, IaaS, Site-2-Site, VPN | Tagged: , , , | 1 Comment »

Event – TechX Azure–(Sweden)

Posted by Mikael Nystrom on March 26, 2014

Theese are my sessions at TechX Azure in Sweden. The full Agenda is here http://azure.techx.se/?page_id=867 and here is how you sign up for it http://azure.techx.se/?page_id=871

header_azure

 

Building Hybrid Solutions – The reasons why you should

Hybrid cloud could be something you have longed for without knowing it. So, what does define the needs?  What will it give you? Why should you always build it? This session will cover the benefits and the basic design needed to make this work. You will learn in what scenarios this is a great solution and in what scenarios this is just an “ok” solution.

Speaker(S) : Mikael Nystrom and Markus Lassfolk

Level: 200

Download Windows Azure Pack and run your own Azure Solution

Azure is great, but what if you would like to have your own Azure, is that possible, YES!, it is, Windows Azure Pack is available for download and using WAP means that you can expose your internal infrastructure exactly as Azure works. In this session you will learn what is needed to make this work and the pitfalls that is to fall into. Note that this session is highly technical and consists mostly of demos.

Speaker(S) : Mikael Nystrom and Markus Lassfolk

Level: 300

Running a full implementation of Remote Desktop Services in Azure – How to?

Remote Desktop Services is in many situations a great solution, but is it possible to run that workload in Azure? Even if it is possible, how to deal with roaming profiles, synchronize data with your on premise datacenter, or should you? At first it seems like an easy setup, but after a while the questions starts coming. In this session you will learn how to set this up, to configure and what design considerations you must take to make it work the way you expect.

Speaker(S) : Mikael Nystrom and Markus Lassfolk

Level: 300

Using Azure as part of a Datacenter Disaster Recovery Scenario

Azure has a new services that has the ability to orchestrate a datacenter failover in the case of a disaster. This service will connect to multiple datacenter and if needed makes sure that all servers are started in the correct order. It uses the Hyper-V Replica feature and System Center Virtual Machine Manager 2012 R2 on the local sites and azure will be the head master and manage the recovery if needed, during this session you will learn how to configure it and how this service could be a real life saver.

Speaker : Mikael Nystrom

Level: 300

Posted in Azure, Event | Tagged: | Leave a Comment »

Recording – Windows Azure Backup

Posted by Mikael Nystrom on February 3, 2014

(In Swedish)

För Microsofts räkning så spelade jag in en serie korta filmer, varsågod.

“Mikael Nyström, expert inom setup & deployment och konsult på TrueSec, lär dig att ta effektiv och säker backup i molnet med Windows Azure Backup. “

 

/Mike

Posted in Azure, Recording | Tagged: | Leave a Comment »

Recording–Hybrid Cloud

Posted by Mikael Nystrom on January 29, 2014

(In Swedish)

För Microsofts räkning så spelade jag in en serie korta filmer, varsågod.

“Mikael Nyström, expert inom setup & deployment och konsult på TrueSec, lär dig mer om hybridmoln i Windows Server 2012 – så kombinerar du Windows Azure och det privata molnet i Windows Server 2012. “

 

/mike

Posted in Azure, Recording, System Center 2012, Windows Server 2012 | Tagged: | Leave a Comment »

Nice to Know – Video: Hybrid Cloud (Swedish)

Posted by Mikael Nystrom on July 3, 2013

FrontPage

Jag fick jobbet att spela in en packe filmer, vilket jag nu har gjort, det blev totalt 17 stycken om Windows Server 2012, Windows 8, Office 2013, System Center 2012, Private Cloud, Public Cloud, Partner Cloud kring saker JAG tycker är viktigt att förstå och kunna. Hur kan man ha roligare

Nionde filmen handlar om Hybrid Moln (vilket är skitballt)

/mike

Posted in Azure, Cloud, Hyper-V, SCVMM, System Center 2012, Windows Server 2012 | Tagged: | Leave a Comment »

Sommarkollo 2013 – Hybrid Moln skapar förutsättningar för en elastisk infrastruktur

Posted by Mikael Nystrom on June 19, 2013

Under denna session kommer vi att visa hur du kan koppla ihop din egna lokala infrasctruture med Azure Virtual Machine för att på så sätt skapa möjligheten att enkelt kunna expandera vid formtoppar.

4/7 Anmäl dig till sessionen här >

22/8 Anmäl dig till sessionen här >

Posted in Azure, Hyper-V, SCVMM, System Center 2012, System Center 2012 R2, Virtual Machine Manager, Windows Server 2012, Windows Server 2012 R2 | Tagged: | Leave a Comment »