Templat Azure Quickstart saat ini tersedia dalam bahasa Inggris
This custom IPSec Policy allows more granular configuration of the IKE Parameters. This allows you to deploy a site-to-site VPN Policy to support specific settings on your VPN Endpoit Device.
Templat Azure Resource Manager ini dibuat oleh anggota komunitas dan bukan oleh Microsoft. Setiap templat Resource Manager dilisensikan kepada Anda berdasarkan perjanjian lisensi oleh pemiliknya, bukan Microsoft. Microsoft tidak bertanggung jawab atas templat Resource Manager yang disediakan dan dilisensikan oleh anggota komunitas dan tidak menyaring keamanan, kompatibilitas, atau performa. Templat Community Resource Manager tidak didukung di bawah program atau layanan dukungan Microsoft apa pun, dan tersedia SEBAGAIMANA ADANYA tanpa jaminan apa pun.
Parameter
| Nama Parameter | Deskripsi |
|---|---|
| location | Resource Location |
| vpnGateway_Name | Name of existing Virtual Network Gateway to deploy the connection to |
| localGateway_Name | Name of existing Local Network Gateway to deploy the connection to |
| vpnName | Name of the VPN connection between Azure and On-Premises (ex: AzureUKS-to-LDN) |
| vpnProtocol | Protocol utilised by the VPN Connection (IKEv1, IKEv2) |
| saLifeTimeSeconds | Security Association Lifetime (Seconds) |
| saDataSizeKilobytes | Security Association Data Size (KB) |
| ipsecEncryption | IPSec Encryption |
| ipsecIntegrity | IPSec Integrity |
| ikeEncryption | IKE Encryption |
| ikeIntegrity | IKE Integrity |
| dhGroup | Diffie-Hellman Group |
| pfsGroup | Perfect Forward Secrecy Group |
| sharedKey | Pre-Shared Key |
| policyBasedTrafficSelectors | Enable this if the OnPremises VPN endpoint needs to be configured as a Policy-Based VPN |
Menggunakan templat
Windows PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deploymentMenginstal dan mengonfigurasi Azure PowerShell
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.network/vpn-custom-ipsec-policy/azuredeploy.json
Baris perintah
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deploymentMenginstal dan Mengonfigurasi Azure Cross-Platform Command-Line Interface
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.network/vpn-custom-ipsec-policy/azuredeploy.json