All right.
So it's time for us to begin our journey down networking and there's obviously a lot to cover here for
the exam.
If you look on screen we've got this network overview image that Microsoft always presents us with and
you can see more on this at the link on the bottom of the screen.
I do encourage you to check that out there's just a ton of documentation.
Microsoft provides around networking but if you look at the image on screen on the left hand side we
have our on premises network with options like an encrypted tunnel dark connection over to the right
hand side which is our Azure network and this right hand side is where we are going to be focused on
primarily as we work through this module.
And there's all sorts of concepts there.
But let's start with the vignette.
First of all the vignette is one of the core pieces and it has a number of capabilities that Microsoft
provides for us to utilize with vignettes in Azure.
And if you look on screen we've got a boundary lines.
We've got our vignette boundary inside that I've got to subnets subnet a subnet B.
And I've got a couple of virtual machines in each one.
Each virtual machine has a network interface card that connects it to the subnet.
And then by default these subnets can rally to each other because they're in the same vignette.
And then if we want to we can put an NSG and network security group which we'll hear more about later
around these to say Okay I want to filter traffic between them.
So this is kind of the core concept of just if I want to put machines out in Asia vignettes all the
way to do it.
So what are all those capabilities.
That's just kind of summarize them and work work through this list.
First of all they are isolated vignettes or isolated from one another unless we choose to connect them
to each other.
So being in isolation is very important particularly multi tenant scenarios.
They will provide Internet access.
So if we want to connect these beams to the Internet we can do that by default unless we choose to restrict
that.
But that is available for us.
They allow us to connect multiple Azure resources not just virtual machines we could put cloud services
like web apps and other services in that we can plug them into the same vignette as our virtual machines
everybody can share that networking boundary if they wish.
The V-neck connectivity I kind of mentioned briefly.
Again we can change these if we want to so we can connect vignettes to other ones and as various methods
to go about doing that connectivity.
We can provide on premises connectivity so we can allow VNS to route to on premises that you saw in
that original diagram we can apply traffic filters via network security groups.
That's kind of the shields again that you can see on the screen there.
And finally vignettes provide a number of capabilities around routing.
So we have default routes available.
We can also define user defined routes and so we can basically customize this to manipulate it in a
way that meets the needs of our organization.
If we look at some of the key points that just hammer these home.
Number one vignettes on primary building block for Azure network and so just think of this as the core
for everything that we do out in Asia and all the services we want to connect together.
It's a private network in Asia based on address space prefix.
And this is something that we define we create subnets in our v net with our own IP ranges.
So we need to plan for them.
We do have to think about things like overlap in address space much like we would on premises as well.
We can choose to bring our own DNS or use Azure provided DNS and there's more to come on that a little
bit later on.
And finally we can choose to connect the network to premises or the internet if we wish to but hopefully
this gives you a brief overview.
I think if you just understand these five points and work through the demos I think you'll get a lot
out of this and see very quickly how easy it is to connect all the pieces of Azure networking together.