Multi tier VNet with NSGs and DMZ

Last updated: 10/04/2015

This template deploys a Virtual Network with 3 subnets, 3 Network Security Groups and appropriate security rules to make the FrontEnd subnet a DMZ

This Azure Resource Manager (ARM) template was created by a member of the community and not by Microsoft. Each ARM template is licensed to you under a licence agreement by its owner, not Microsoft. Microsoft is not responsible for ARM templates provided and licensed by community members and does not screen for security, compatibility or performance. Community ARM templates are not supported under any Microsoft support programme or service, and are made available AS IS without warranty of any kind.

Parameters

Parameter Name Description
virtualNetworkName This is your Virtual Network
addressPrefix The CIDR address space for your Virtual Network in Azure
FESubnetPrefix This is CIDR prefix for the FrontEnd Subnet
AppSubnetPrefix This is CIDR prefix for the Application Subnet
DBSubnetPrefix This is CIDR prefix for the Database Subnet
FENSGName This is name of the networkSecurityGroup that will be assigned to FrontEnd Subnet
AppNSGName This is name of the networkSecurityGroup that will be assigned to Application Subnet
DBNSGName This is name of the networkSecurityGroup that will be assigned to Database Subnet

Use the template

PowerShell
New-AzureRmResourceGroupDeployment -Name <deployment-name> -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/azure/azure-quickstart-templates/master/201-nsg-dmz-in-vnet/azuredeploy.json
Installing and configuring Azure PowerShell
Command line
azure config mode arm
azure group deployment create <my-resource-group> <my-deployment-name> --template-uri https://raw.githubusercontent.com/azure/azure-quickstart-templates/master/201-nsg-dmz-in-vnet/azuredeploy.json
Installing and configuring the Azure cross-platform command-line interface