Azure Virtual WAN: Hybrid Networking Game-Changer

[@786MHussain]

Thanks!

[@AzureAcademy]

You bet, thanks for the support!

[@Thebigwa]

Using VWAN is more expensive then doing the setup manually in a hub&spoke model but so much simpler, especially in a multi region scenario. Good job on that video 👍🏼

[@AzureAcademy]

Thanks Charles! I hear ya on the cost side...have you looked into Azure Virtual Network Manager? Not exactly the same as VWAN, but you get centralized network management and security 👉 kzbin.info/www/bejne/aXrOm316rJugd5I

[@aktapaz]

Great video, it is impressive how you manage to explain complex content in a quick and simple way. I am learning a lot from you. Thank you.

[@AzureAcademy]

Thanks! What is the next thing you want to learn?

[@Cyanic52]

Hi there! Great video. Just one correction - the address space for the Azure Virtual WAN doesn't need to be large, it's used for all the appliances (e.g VNG S2S, VNG P2S, Expressroute, FW). Most orgs would probably only need a /24. I think the biggest problem for people moving to Azure VWAN, will be migrating existing Hub-Spoke setups. VWAN does not let you peer a network that already uses another peer for gateway transit, meaning if you had a VNG with VPNs for instance - you're going to need to migrate the VPNs off first before you can break the gateway transit option. I understand why MS have done this, but it would mean migrating would be made so much more simple.

[@AzureAcademy]

Thanks for sharing!

thank you sir - i learned some stuff here

[@AzureAcademy]

Glad to hear it

[@okkiesmaster7820]

i just realised this dude is actually really good at powerpoint presentations

[@AzureAcademy]

I don’t know if I should feel complimented or insulted 🤣

[@okkiesmaster7820]

@@AzureAcademy i watched alot of your videos, this was the first time i noticed the clicker for the powershell presentation:p

[@AzureAcademy]

Oh that…yeah, no PowerPoint on my channel it’s for my teleprompter so I can look right at the camera while I’m talking ☺️

[@andrewmccallum5699]

Thanks Dean, good to know re Azure vWan, detailed video

[@AzureAcademy]

Thanks Andrew!

[@christianibiri]

I Love Virtual Wan, so powerful :)

[@AzureAcademy]

It is very cool

[@allenh318]

Great video and easy to follow. vWAN was easy to setup but now we can't get traffic to internet. We are using an AZ firewall and all internal traffic and site-to-e-site traffic works, just can't egress to internet from Azure machines.

[@AzureAcademy]

Sounds like Rooting or firewall issues…do a network trace and see where the traffic stops Check firewall rules that you are allowed to go to the internet

[@allenh318]

@@AzureAcademy Did some more digging, the subnet the firewall is located on was setup by another in our org, and i do not have access to it. I believe the routing issue might be on that subnet. I will have them allow me access tomorrow and hopefully that will be where the issue is.

[@AzureAcademy]

👍☺️👍

[@allenh318]

Ugh, this was not the issue, we still can't get internet access from VM in a vWAN. Traffic is getting to firewall but no further, any ideas would be greatly appreciated.

[@allenh318]

Found out the issue today, ICMP is blocked by Azure to internet, tried a CURL command and it worked then built a windows server and have internet access from it. Never thought ping was blocked in Azure to internet but not to other addresses. Crap!

[@chriseddisford1834]

great video

[@AzureAcademy]

Thanks!

[@Aaron70235]

What happens when you have multiple hubs? Can a vnet in one hub communicate with a vnet in another?

[@AzureAcademy]

Great question…This gets into something called route intent…I have an up coming video on this. Short answer is yes

[@pratik4978]

Can i connect two vwan across tenant and restrict route exchange between them . We dont want this vwan advertising default route to each other and create mess . Thanks

[@AzureAcademy]

My first question would be…why would you connect them together if you don’t want them to share routing…that is a primary function of VWan? 2nd yes you can do route exclusions

[@pratik4978]

@@AzureAcademy there is separation of a company from it's parent company and we have to separate azure infrastructure by creating in new tenant but still want to have connectivity with existing tenant for accessing any service which are not migrated yet .we will be connecting two tenant via cross tenant but Microsoft says when you connect two vwan they tend to advertise default route . If you can share any link it will be helpful

[@AzureAcademy]

If there is a solution I think it’s route intent learn.microsoft.com/en-us/azure/virtual-wan/how-to-routing-policies

[@BuggageandGlitchage]

Looks great, but wouldn’t it be tricky to transition from an existing hub and spoke topology to this?

[@AzureAcademy]

Actually NO. You can "adopt" the existing VNETs Spokes into your VWAN Hub...that is what I showed in the video. Now depending on what resources you have in your current hub...how hard it is can depend. Example: You have a Standard Azure Firewall. Its not too bad. Convert the Firewall to Azure Policy based then make your VWAN Hub a Secure Hub...then use the Azure policy file you just generated. Want to know how to do this...watch this video 👉 kzbin.info/www/bejne/faOyq2WCmp6JkJI

[@BuggageandGlitchage]

@@AzureAcademy Excellent! We are using Azure Firewall premium and we are wanting to migrate from a 3rd party SDWAN to Azure VWAN, so this looks like a good path for us to take. Now I just need to work out how to move the existing ExpressRoute over to VWAN too.

[@AzureAcademy]

The express route gateway and circuit generally won’t change but you will need to update the connection to your ISP

[@BuggageandGlitchage]

@@AzureAcademy ok thanks

[@AzureAcademy]

👍👍

[@guykanon01]

I would luv to find a video explaining how to setup a simple cloud network environment with 17 users and a shared data drive - nothing fancy We r currently paying several thousands a month to Abacus Private Cloud (now called Caret) to manage our cloud network - they recently offshored support so now hard to understand and far less knowledgeable - We r very very desperate to get away from Abacus/Caret as we have problems with their systems almost everyday. Our VMs host Quickbooks, Lacerte Tax, OfficeTools (rickety & clucky) and 365 Would it b possible to setup a 17 user cloud network with Windows 365? If so, would u please do a how to? AVD & Nerdio seems too complex for a small accounting office

[@AzureAcademy]

Sounds painful. Yes it’s possible but we should talk further for all requirements Email me so we can setup a time to talk ☺️

[@bhushangawale3252]

Thank you for another excellent video. It would be highly appreciated if you could provide insights on setting up P2S for a common internet breakout scenario where multiple devices get into Azure VNET via P2S but intend to go to internet using a single static IP address. This is a frequently searched topic, and there is a scarcity of specific and comprehensive content available. Your guidance on this would be invaluable.

[@AzureAcademy]

So to be clear...you have a user on a laptop using a P2S client to log onto a VM in Azure. Now that they are on that VM the user wants to go to the internet and you want all that user traffic to funnel into a single outgoing IP address? The answer is simple...and already done...Azure NAT Gateway. Check it out here 👉kzbin.info/www/bejne/r5jLo558r8aMirc

[@techevangelist8373]

not getting into details.

[@AzureAcademy]

This is an intro video and how to create VWAN, Which details did I miss?