Multi tier VNet with NSGs and DMZ

Narayan Annamalai 提供
上次更新日期: 2015/4/10

This template deploys a Virtual Network with 3 subnets, 3 Network Security Groups and appropriate security rules to make the FrontEnd subnet a DMZ

此 Azure Resource Manager (ARM) 範本是由社群成員 (而非 Microsoft) 建立。每個 ARM 範本都是由其擁有者 (而非 Microsoft) 依據授權合約授權給您。Microsoft 並不負責社群成員所提供和授權的 ARM 範本,而不會為了安全性、相容性或效能進行篩選。社群 ARM 範本並未依據任何 Microsoft 支援方案或服務提供支援,而且會在沒有任何擔保的情況下依現況提供。

參數

參數名稱 說明
virtualNetworkName This is your Virtual Network
addressPrefix The CIDR address space for your Virtual Network in Azure
FESubnetPrefix This is CIDR prefix for the FrontEnd Subnet
AppSubnetPrefix This is CIDR prefix for the Application Subnet
DBSubnetPrefix This is CIDR prefix for the Database Subnet
FENSGName This is name of the networkSecurityGroup that will be assigned to FrontEnd Subnet
AppNSGName This is name of the networkSecurityGroup that will be assigned to Application Subnet
DBNSGName This is name of the networkSecurityGroup that will be assigned to Database Subnet

使用範本

PowerShell

New-AzureRmResourceGroupDeployment -Name <deployment-name> -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/azure/azure-quickstart-templates/master/201-nsg-dmz-in-vnet/azuredeploy.json
安裝和設定 Azure PowerShell

命令列

azure config mode arm
azure group deployment create <my-resource-group> <my-deployment-name> --template-uri https://raw.githubusercontent.com/azure/azure-quickstart-templates/master/201-nsg-dmz-in-vnet/azuredeploy.json
安裝和設定 Azure 跨平台命令列介面