Your Network In The Cloud

1

Your Network In

The Cloud

2

Introduction

3

4

What is Azure

What is Azure

Workloads

5

What is Azure

Workloads

Management

What is Azure

Workloads

Management

Virtual Networks

What is Azure

Workloads

Management

Virtual Networks

VPN Gateway

6

What is Azure

Workloads

Management

Virtual Networks

VPN Gateway

Virtual Machines

What is Azure

Workloads

Management

Virtual Networks

VPN Gateway

Virtual Machines

Backup

7

Microsoft Azure is a growing collection of integrated cloud services – analytics, computing, database, mobile, networking, storage and web – for moving faster, achieving more and saving

money.

Microsoft

Open And Flexible Cloud service Platform


Broad Selection Of:

8


Broad Selection Of:

Operating Systems


Broad Selection Of:

Operating Systems

Frameworks


Broad Selection Of:

Operating Systems

Frameworks

Tools

9


Broad Selection Of:

Operating Systems

Frameworks

Tools

Databases


Broad Selection Of:

Operating Systems

Frameworks

Tools

Databases

Host Apps, Web Apps and Web Sites


Broad Selection Of:

Operating Systems

Frameworks

Tools

Databases

Host Apps, Web Apps and Web Sites

Extend Your Existing IT

10

Over 14b USD Investment


First Datacentre Built In 1989



Up To 100 Datacentres

11




EMEA Region Datacentres in:





Ireland





Ireland

Netherlands

12





Ireland

Netherlands

Finland





Ireland

Netherlands

Finland

Austria





Ireland

Netherlands

Finland

Austria

UK Datacentres Announced In November 2015

13

IaaS

IaaS

Infrastructure as a Service

14

IaaS


Virtual Machines

IaaS


Virtual Machines

Storage

IaaS


Virtual Machines

Storage

Servers

15

IaaS


Virtual Machines

Storage

Servers

Operating Systems

IaaS


Virtual Machines

Storage

Servers

Operating Systems

SaaS

16

IaaS


Virtual Machines

Storage

Servers

Operating Systems

SaaS

Software as a Service

IaaS


Virtual Machines

Storage

Servers

Operating Systems

SaaS


Azure AD

IaaS


Virtual Machines

Storage

Servers

Operating Systems

SaaS


Azure AD

Azure AD Domain Services

17

IaaS


Virtual Machines

Storage

Servers

Operating Systems

SaaS


Azure AD


Azure SQL

IaaS


Virtual Machines

Storage

Servers

Operating Systems

SaaS


Azure AD


Azure SQL

Web Hosting

18

Global Network Of Datacentres


Replication Options


Replication Options

Locally Redundant Storage:

19


Replication Options


Multiple Synchronous Copies Within A Single Datacentre


Replication Options



3 Copies


Replication Options



3 Copies

Geo Redundant Storage :

20


Replication Options



3 Copies


Same As LRS, Plus Multiple Asynchronous Copies In A Second Datacentre


Replication Options



3 Copies


Same As LRS, Plus Multiple Asynchronous Copies In A Second Datacentre

6 Copies

21

Servers

Servers

Replica Domain Controllers

Servers


User Storage Servers

22

Servers



SQL Servers

Servers



SQL Servers

Web Servers

Servers



SQL Servers

Web Servers

Exchange Servers

23

Servers



SQL Servers

Web Servers

Exchange Servers

RDS Environments

Servers



SQL Servers

Web Servers

Exchange Servers

RDS Environments

CC4 Servers

Servers



SQL Servers

Web Servers

Exchange Servers

RDS Environments

CC4 Servers

Federation Services

24

Servers



SQL Servers

Web Servers

Exchange Servers

RDS Environments

CC4 Servers

Federation Services

Applications

Servers



SQL Servers

Web Servers

Exchange Servers

RDS Environments

CC4 Servers

Federation Services

Applications

SQL Databases

Servers



SQL Servers

Web Servers

Exchange Servers

RDS Environments

CC4 Servers

Federation Services

Applications

SQL Databases

Web Sites

25

Servers



SQL Servers

Web Servers

Exchange Servers

RDS Environments

CC4 Servers

Federation Services

Applications

SQL Databases

Web Sites

Custom Applications

26

VPN

New Servers

27

New Servers

Create A New Azure Virtual Machine

New Servers


Migrate Workload

New Servers


Migrate Workload

Data

28

New Servers


Migrate Workload

Data

SQL Database

New Servers


Migrate Workload

Data

SQL Database

Mailboxes

New Servers


Migrate Workload

Data

SQL Database

Mailboxes

Active Directory

29

Migrated Servers

Migrated Servers

Microsoft Virtual Machine Converter

Migrated Servers


V3 - Does Not Require SCCM

30

Migrated Servers



Provided Free

Migrated Servers



Provided Free

Converts Physical to Hyper-V

Migrated Servers



Provided Free


Converts Virtual Machines To Hyper-V And Azure

31

Migrated Servers



Provided Free



Supports 2008 R2 SP1 >

Migrated Servers



Provided Free




Supports Vista >

Migrated Servers



Provided Free




Supports Vista >

Does Not Support EFI Boot Partitions

32

Migrated Servers



Provided Free




Supports Vista >

Does Not Support EFI Boot Partitions

Cannot Directly Convert Physical Servers To Azure

V

VHyper-V

ESX4.1>

vCenter 4.1>

33

VVMVMC

P

P V

Hyper-V

34

P

MVMC

V

VVMVMC

V

35

Deployment Models

Deployment Models

Resource Manager (RM)

36

Deployment Models


Latest Deployment Model

Deployment Models



All New Services Supported

Deployment Models




Some Legacy Services Supported

37

Deployment Models





Eventually All Services Will Be Supported

Deployment Models






Classic

Deployment Models






Classic

Most Existing Services Supported

38

Deployment Models






Classic


New Services Will Not Be Supported

Deployment Models






Classic


New Services Will Not Be Supported

Classic And RM Available In Both Portal And PowerShell

39

Services

Tiles

40

Link ToClassic Portal

Classic Portal

Services

41

Items

42

Virtual NetworkLogin-AzureRMAccount

43

44

Virtual NetworkAdd-AzureAccount

45

VV Vault

Vault

46

Representation Of Your Own Network In The Cloud


Logical Isolation Of Your Subscription



Address Space

47



Address Space

Subnets



Address Space

Subnets

Default Gateways



Address Space

Subnets

Default Gateways

Routing

48

Representation Of Your Own network In The Cloud


Address Space

Subnets

Default Gateways

Routing

VPN Gateway

Address Space

172.16.0.0/23

49

172.16.0.0/25

172.16.0.0/26

Virtual Gateway

Subnet

172.16.1.248/29

172.16.0.0/26

50

Site-To-Site

Site-To-Site

VPN Connection Over IPsec

51

Site-To-Site


Multi-Site

Site-To-Site


Multi-Site

Connects Multiple Sites To A Virtual Network

Site-To-Site


Multi-Site


Point-To-Site

52

Site-To-Site


Multi-Site


Point-To-Site

VPN Connection From A Client

Site-To-Site


Multi-Site


Point-To-Site


Over Secure Socket Tunnelling Protocol (SSTP)

Site-To-Site


Multi-Site


Point-To-Site



ExpressRoute

53

Site-To-Site


Multi-Site


Point-To-Site



ExpressRoute

Direct Connection To Azure from your LAN

Site-To-Site


Multi-Site


Point-To-Site



ExpressRoute


Dedicated ISP Links

Site-To-Site


Multi-Site


Point-To-Site



ExpressRoute


Dedicated ISP Links

Does Not Traverse The Public Internet

54

Creates A Secure Connection Between On-Premises and Virtual Networks


Typically < 100 Mbps Aggregate Bandwidth



Requires:

55



Requires:

A Supported Device



Requires:

A Supported Device

Public IPv4 IP Address

56

Supported Router

Vendor Family

Juniper SRX

Cisco ASA

Fortinet FortiGate

57

Virtual Gateway

Site To Site VPN

WAN

58

On-Premises Device

Azure VM

V

Layer 3V

59

Networks

Custom Create

Name And Region

60

On-Premises DNS Server

S2S VPN Connection

Local Network Name& Device IP Address

61

On-Premises NetworkDetails

Incorrect Address Space

Correct Address SpaceAnd Subnet

62

Add Gateway Subnet

Virtual Network

Local Network

63

Create Gateway

64

Download Script

65

66

Microsoft

Microsoft

Windows Server 2012 R2 Datacenter

Microsoft


Windows Server Essentials

67

Microsoft



Windows Server 2008 R2 SP1

Microsoft




Windows Server RDSH + Office 365 Pro Plus

Microsoft





Windows Server 2016 Preview

68

Microsoft






Windows Server 2012 R2 With SharePoint 2013 Trial

Microsoft







Windows Server 2012 R2 With SQL 2014 SP1 Enterprise

Microsoft








Windows Desktop 7, 8.1, 10

69

Microsoft









Windows Server 2012 R2 With Oracle

Microsoft










Other

Microsoft










Other

Ubuntu 12.04 LTS

70

Microsoft










Other

Ubuntu 12.04 LTS

Suse Enterprise Server

A, D, DS, G, and GS

A, D, DS, G, and GS

A0-7

71

A, D, DS, G, and GS

A0-7

Shared Core To 8 Cores

A, D, DS, G, and GS

A0-7


.75GB To 56GB RAM

A, D, DS, G, and GS

A0-7


.75GB To 56GB RAM

A8-A11

72

A, D, DS, G, and GS

A0-7


.75GB To 56GB RAM

A8-A11

Compute Intensive Servers

A, D, DS, G, and GS

A0-7


.75GB To 56GB RAM

A8-A11


8 To 16 Cores

A, D, DS, G, and GS

A0-7


.75GB To 56GB RAM

A8-A11


8 To 16 Cores

56GB To 112GB RAM

73

Dv2-series, D-series, G-series, and the DS/GS


Enterprise Grade


Enterprise Grade

Faster CPUs

74


Enterprise Grade

Faster CPUs

Better Local Disk Performance


Enterprise Grade

Faster CPUs


Some SSD Support


Enterprise Grade

Faster CPUs


Some SSD Support

1 To 32 Cores

75


Enterprise Grade

Faster CPUs


Some SSD Support

1 To 32 Cores

3.5GB To 448GB RAM

Type Name Size

Standard A0 Extra Small

Standard A1 Small

Standard A2 Medium

Standard A3 Large

Standard A4 Extra Large

Basic And Standard Tiers

76


Basic


Basic

A0 -4


Basic

A0 -4

Economical Option

77


Basic

A0 -4

Economical Option

Development Workloads


Basic

A0 -4

Economical Option


Test Servers


Basic

A0 -4

Economical Option


Test Servers

No Load Balancing

78


Basic

A0 -4

Economical Option


Test Servers

No Load Balancing

No Auto-scaling


Basic

A0 -4

Economical Option


Test Servers

No Load Balancing

No Auto-scaling

Not Designed For Memory-Intensive Virtual Machines


Basic

A0 -4

Economical Option


Test Servers

No Load Balancing

No Auto-scaling


Standard

79


Basic

A0 -4

Economical Option


Test Servers

No Load Balancing

No Auto-scaling


Standard

A0-A7


Basic

A0 -4

Economical Option


Test Servers

No Load Balancing

No Auto-scaling


Standard

A0-A7

Supports All VM Configuration And Features


Basic

A0 -4

Economical Option


Test Servers

No Load Balancing

No Auto-scaling


Standard

A0-A7

Supports All VM Configuration And Features

Cost Includes OS License

80

Temporary Disk Size Dependant On Server Type


Stores the Page File



D:\

81



D:\

NOT Live Migrated



D:\

NOT Live Migrated

Should Not Be Used To Store Data

Virtual Network

82

83

84

Azure Provides Each Subnet A DHCP Scope

85


Azure VMs Are DHCP Enabled



First Address is x.x.x.4

Virtual Network

86




MUST NOT SET IP ADDRESS THROUGH NETWORK GUI!

Virtual Network




MUST NOT SET IP ADDRESS THROUGH NETWORK GUI!

Microsoft Azure PowerShell Must Be Used To Set A Static vNET Address

87

Virtual NetworkGet-AzureVM -ServiceName

SRA-DC-03 -Name SRA-DC-03 |



Set-AzureStaticVNetIP -IPAddress 172.16.0.8 |

88



Set-AzureStaticVNetIP -IPAddress 172.16.0.8 |

Update-AzureVM

89

C: Is the OS Drive

90

C: Is the OS Drive

D: Is The Temporary Drive

C: Is the OS Drive


Holds The page File

C: Is the OS Drive


Holds The page File

DO NOT STORE DATA ON THIS DISK

91

C: Is the OS Drive


Holds The page File


Data Should Be Stored On An Attached Disk

C: Is the OS Drive


Holds The page File


Data Should Be Stored On An Attached Disk

SYSVOL Cannot Be Located On The C: Drive

92

93

RDP Through Azure Portal

94


Connects To Published End Point



Random Port to 3389



Random Port to 3389

Should Not Configure 3389 To 3389

95

96

97

Install ADDS From Server Manager


Promote To Domain Controller

98


Promote To Domain Controller

Database, Log Files and SYSVOL MUST Go On Attached Disk

Add New DC As DNS Server

99

Azure Recovery Services


RM Investigating Other Options

100

Requires Vault

Requires Vault

Discover Virtual Machine

101

Requires Vault


Register Virtual Machine – Installs Agent

Requires Vault



Protect Virtual Machine

Requires Vault




VM Level Restore

102

Requires Vault




VM Level Restore

Azure Backup Agent For File And Folder Level Restore

V

Vault


Agent

OS Resource Data Disks

V

Vault


Agent

Snapshot


103

V

Vault


Agent

Snapshot


Data Transfer

V

Vault


Agent


Recovery Points

104

Supported By VMs For File Level Backup And Restore


Installed On VM


Installed On VM

Connects To Azure Vault

105


Installed On VM


Credential File Valid for Two Days


Installed On VM



Backup Configured From The Azure Backup Agent MMC


Installed On VM



Backup Configured From The Azure Backup Agent MMC

No System State Backup

106

If Recovering A Complete VM, Delete The Existing VM

107


For Data Transfer, Restore With A New Name



Pick A Recovery Point




Specify Destination

108




Specify Destination

VM Name




Specify Destination

VM Name

Cloud Service




Specify Destination

VM Name

Cloud Service

Select Storage Account

109




Specify Destination

VM Name

Cloud Service


Select vNET and Subnet




Specify Destination

VM Name

Cloud Service


Select vNET and Subnet

Rules Apply For Domain Controllers

Single Domain Controller

110


Same As Member Server



Multiple DCs



Multiple DCs

NO DSRM On Azure Virtual Machines

111



Multiple DCs


Possibility Of USN Rollback



Multiple DCs



Can Only Be Restored With PowerShell



Multiple DCs



Can Only Be Restored With PowerShell

Not To Be Undertaken Lightly

112

V

SRA-Member-01


Vault


Recovery Points

113

V

Vault



SRA-Member-01

V

Vault



SRA-Member-01

V

Vault



SRA-Member-01

114

V

Vault



SRA-Member-01

V


SRA-Member-01

V

SRA-Member-01


115

V

SRA-Member-01


Vault


Recovery Points

V

SRA-Member-01


Vault


V

SRA-Member-01-Restore


V

SRA-Member-01


V



Data Transfer

116

V

SRA-Member-01


V



V

SRA-Member-01


117

V

SRA-Member-01


V

SRA-Member-01


Azure Backup Agent

Recovery Points

V

SRA-Member-01


VaultRecovery Points

Azure Backup Agent

118

V

SRA-Member-01


VaultRecovery Points

Azure Backup Agent

Covered A Lot

119

Covered A Lot

Exciting

Covered A Lot

Exciting

Complex

Covered A Lot

Exciting

Complex

End Points

120

Covered A Lot

Exciting

Complex

End Points

Load Balances

Covered A Lot

Exciting

Complex

End Points

Load Balances

Traffic Manager

Covered A Lot

Exciting

Complex

End Points

Load Balances

Traffic Manager

Affinity Groups

121

Covered A Lot

Exciting

Complex

End Points

Load Balances

Traffic Manager

Affinity Groups

RM Is A Great Partner

Documents

Your Network In The Cloud