Skip to content

Latest commit

 

History

History
89 lines (60 loc) · 4.86 KB

quick-create-ipgroup-template.md

File metadata and controls

89 lines (60 loc) · 4.86 KB
title description services author ms.service ms.topic ms.custom ms.date ms.author
Quickstart: Create an Azure Firewall and IP Groups - Resource Manager template
Learn how to use a Resource Manager template to create an Azure Firewall and IP Groups.
firewall
vhorne
firewall
quickstart
subject-armqs
04/06/2020
victorh

Quickstart: Create an Azure Firewall and IP Groups - Resource Manager template

In this quickstart, you use a Resource Manager template to deploy an Azure Firewall with sample IP Groups used in a network rule and application rule. An IP Group is a top-level resource that allows you to define and group IP addresses, ranges, and subnets into a single object. This is useful for managing IP addresses in Azure Firewall rules. You can either manually enter IP addresses or import them from a file.

[!INCLUDE About Azure Resource Manager]

Prerequisites

Create an Azure Firewall and IP Groups

This template creates an Azure Firewall and IP Groups, along with the necessary resources to support the Azure Firewall.

Review the template

The template used in this quickstart is from Azure Quickstart templates.

:::code language="json" source="~/quickstart-templates/101-azurefirewall-create-with-ipgroups-and-linux-jumpbox/azuredeploy.json" range="001-512" highlight="118-141":::

Multiple Azure resources are defined in the template:

Deploy the template

Deploy Resource Manager template to Azure:

  1. Select Deploy to Azure to sign in to Azure and open the template. The template creates an Azure Firewall, the network infrastructure, and two virtual machines.

    Deploy to Azure

  2. In the portal, on the Create an Azure Firewall with IpGroups page, type or select the following values:

    • Subscription: Select from existing subscriptions
    • Resource group: Select from existing resource groups or select Create new, and select OK.
    • Location: Select a location
    • Virtual Network Name: Type a name for the new virtual network (VNet)
    • IP Group Name 1: Type name for IP Group 1
    • IP Group Name 2: Type name for IP Group 2
    • Admin Username: Type username for the administrator user account
    • Authentication: Select sshPublicKey or password
    • Admin Password: Type an administrator password or key

  3. Select I agree to the terms and conditions stated above and then select Purchase. The deployment can take 10 minutes or longer to complete.

Review deployed resources

In the Azure portal, review the deployed resources, especially the firewall rules that use IP Groups.

:::image type="content" source="media/quick-create-ipgroup-template/ipgroups.png" alt-text="IP Groups.":::

:::image type="content" source="media/quick-create-ipgroup-template/network-rule.png" alt-text="Network rules.":::

To learn about the JSON syntax and properties for a firewall in a template, see Microsoft.Network azureFirewalls template reference.

Clean up resources

When you no longer need the resources that you created with the firewall, delete the resource group. This removes the firewall and all the related resources.

To delete the resource group, call the Remove-AzResourceGroup cmdlet:

Remove-AzResourceGroup -Name "<your resource group name>"

Next steps

[!div class="nextstepaction"] Tutorial: Deploy and configure Azure Firewall in a hybrid network using the Azure portal