Azure Administrator > Network > Connectivity between VNETs
✔ peering
VNET PEERING : VNETs in SAME region
GLOBAL VNET PEERING : VNETs in DIFFERENT regions
CROSS-TENANT VNET PEERING : must configure in CLI, PowerShell or ARM templates (not Portal)
for complex networks use IPsec Site-to-Site
low latency, high bandwidth connection
data transfer across subscriptions and regions
2 peering connections are required :
- A -> B
- B -> A
NOT TRANSITIVE :
- A <-> B
- B <-> C
- A <-X-> C
no VNET GATEWAY is necessary
✔ configuring Peering with PowerShell
# get information about the VNETs
Get-AzVirtualNetwork
-Name <VNET-NAME)
-ResourceGroup <RG-NAME>
# create the peer
Add-AzVirtualNetworkPeering
-Name <PEER-NAME>
...
✔ VNET-to-VNET Connection
1 - create the “Gateway subnet” in both VNETs
2 - create the VIRTUAL NETWORK GATEWAY in both VNETs
3 - create 2 VPN CONNECTIONS between the two Gateways
✔ create the Gateway with PowerShell
# create the gateway
Add-AzVirtualNetworkGateway
-Name <GATEWAY-NAME>
...