Create a Site-to-Site VPN Connection

Chris 提供
上次更新时间: 2017/1/2

This template allows you to create a Site-to-Site VPN Connection using Virtual Network Gateways

此 Azure Resource Manager (ARM) 模板由社区的某个成员(而不是由 Microsoft)创建。每个 ARM 模板都根据其所有者(不是 Microsoft)的许可协议向你授予许可。Microsoft 不对由社区成员提供并授予许可的 ARM 模板负责,并且不针对安全性、兼容性和性能进行筛选。社区 ARM 模板不由任何 Microsoft 支持计划或服务提供支持,按“原样”提供,没有任何种类的担保。

参数

参数名 说明
vpnType Route based or policy based
localGatewayName Arbitrary name for gateway resource representing
localGatewayIpAddress Public IP of your StrongSwan Instance
localAddressPrefix CIDR block representing the address space of the OnPremise VPN network's Subnet
virtualNetworkName Arbitrary name for the Azure Virtual Network
azureVNetAddressPrefix CIDR block representing the address space of the Azure VNet
subnetName Arbitrary name for the Azure Subnet
subnetPrefix CIDR block for VM subnet, subset of azureVNetAddressPrefix address space
gatewaySubnetPrefix CIDR block for gateway subnet, subset of azureVNetAddressPrefix address space
gatewayPublicIPName Arbitrary name for public IP resource used for the new azure gateway
gatewayName Arbitrary name for the new gateway
gatewaySku The Sku of the Gateway. This must be one of Basic, Standard or HighPerformance.
connectionName Arbitrary name for the new connection between Azure VNet and other network
sharedKey Shared key (PSK) for IPSec tunnel

使用模板

PowerShell
New-AzureRmResourceGroupDeployment -Name <deployment-name> -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/azure/azure-quickstart-templates/master/101-site-to-site-vpn-create/azuredeploy.json
安装和配置 Azure PowerShell
命令行
azure config mode arm
azure group deployment create <my-resource-group> <my-deployment-name> --template-uri https://raw.githubusercontent.com/azure/azure-quickstart-templates/master/101-site-to-site-vpn-create/azuredeploy.json
安装和配置 Azure 跨平台命令行界面