Azure 快速入門範本目前提供英文版
This template creates a virtual network with 3 subnets (server subnet, jumpbox subet and AzureFirewall subnet), a jumpbox VM with public IP, A server VM, UDR route to point to Azure Firewall for the Server Subnet and an Azure Firewall with 1 or more Public IP addresses, 1 sample application rule, 1 sample network rule and default private ranges
此 Azure Resource Manager (ARM) 範本是由社群成員 (而非 Microsoft) 建立。每個 ARM 範本都是由其擁有者 (而非 Microsoft) 依據授權合約授權給您。Microsoft 並不負責社群成員所提供和授權的 ARM 範本,而不會為了安全性、相容性或效能進行篩選。社群 ARM 範本並未依據任何 Microsoft 支援方案或服務提供支援,而且會在沒有任何擔保的情況下依現況提供。
參數
參數名稱 | 說明 |
---|---|
virtualNetworkName | virtual network name |
adminUsername | Username for the Virtual Machine. |
location | Location for all resources, the location must support Availability Zones if required. |
availabilityZones | Zone numbers e.g. 1,2,3. |
privateRanges | Ip prefixes to which traffic won't be SNAT'ed. |
vmSize | Zone numbers e.g. 1,2,3. |
numberOfFirewallPublicIPAddresses | Number of public IP addresses for the Azure Firewall |
authenticationType | Type of authentication to use on the Virtual Machine. SSH key is recommended. |
adminPasswordOrKey | SSH Key or password for the Virtual Machine. SSH key is recommended. |
使用範本
PowerShell
New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deployment安裝和設定 Azure PowerShell
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.network/azurefirewall-sandbox-linux/azuredeploy.json
命令列
az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deployment安裝和設定 Azure 跨平台命令列介面
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.network/azurefirewall-sandbox-linux/azuredeploy.json