Mutual communication between different subscriptions for Windows Azure

For Windows Azure subscriptions, it's not just a commercially billable approach, it's also a stand-alone resource pool subscription. Different subscriptions are not accessible to each other, so today it's easy to configure the communication between different subscriptions for Windows Azure. This method of mine is in fact the site2site practice.

This environment: Different subscription IDs for the same azure account

Topology diagram for this environment:

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m02/6f/bc/wkiom1wmfuntl6exaaf8iv8n3tu961.jpg "height=" 336 "/>

1. I create two different subscriptions in the demo account and create a virtual network;

Create Vnet01 first, and configure the virtual network segment as 192.168.1.0/24

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6F/BC/wKiom1WmfunymdtJAAFyukR5apI720.jpg "height=" 470 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6F/BC/wKiom1WmfurRgUHNAAEOMZAnycc406.jpg "height=" 457 "/>

Create Vnet02, and configure the virtual network segment as 192.168.2.0/24;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6F/BC/wKiom1WmfurzxJQsAAFhlvuBrQ8382.jpg "height=" 438 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6F/BC/wKiom1WmfuuTXWQqAAEFlE4uTVI361.jpg "height=" 453 "/>

2. I have created virtual machines in different virtual networks, for reference: http://gshao.blog.51cto.com/3512873/1344846

Create a VNET01VM virtual machine on a vNet01 virtual network;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6F/BC/wKiom1Wmfuuxjz05AAKzB5bvNwI278.jpg "height=" 611 "/>

Create a VNET02VM virtual machine on a vNet02 virtual network;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6F/BC/wKiom1WmfuzBGrfNAAKcifGYZv4057.jpg "height=" 604 "/>

3. In the virtual network configuration S2S, by default in the Manage portal is not see the configuration site-to-site link, we must first configure the local network;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6F/BC/wKiom1Wmfu2zqBIdAAHY1hTD790985.jpg "height=" 531 "/>

First create a ToVnet02, to the vNet02 local network, for the subscription selection, and your current Vnet01 consistent;

PS: Here to fill in the VPN IP is to deceive the authentication of azure, and so on 02 configuration good network, you can modify the next;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m01/6f/b9/wkiol1wmgmfbgk7faaenj2h0dcc753.jpg "height=" 650 "/>

Here need to add is vNet02 network segment, in order to avoid IP conflicts, we can set the starting IP;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6F/B9/wKioL1WmgMiwWgrgAAEEQR5rfIk509.jpg "height=" 631 "/>

In vNet01 configuration, tick connect to local network, and save, need to determine has selected ToVnet02;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6F/BC/wKiom1Wmfu7wtJFwAAH_LM6o15c920.jpg "height=" 567 "/>

The choice is dynamic routing, which takes about 15 minutes to 30 minutes;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6F/B9/wKioL1WmgMnh8EHNAAH81SdHqvA741.jpg "height=" 650 "/>

We don't have to wait for the first dynamic gateway to be created, so we can continue to do the same on Vnet02;

Create a ToVnet01, to the local network of Vnet01;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6F/B9/wKioL1WmgMqwMWa9AAEBx0-qfbM707.jpg "height=" 644 "/>

Fill in Vnet01 virtual network segment to avoid IP conflict;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6F/BC/wKiom1WmfvDAzkAiAAEjV25uLyo564.jpg "height=" 652 "/>

In the Vnet02 configuration tick connect to the local network, verify that the local network is ToVnet01;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6F/BC/wKiom1WmfvCAYwFiAAH4RsijDXE679.jpg "height=" 655 "/>

Create a dynamic route on the Vnet02;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6F/BC/wKiom1WmfvHykqsjAAHWZ0FLmUI443.jpg "height=" 616 "/>

VNET01 Gateway created, we can get to Vnet01 external VPN IP is how much, at this time can be in Tovnet01 local network modification under the VPN IP;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m01/6f/bc/wkiom1wmfvkjhu8gaahvkcgoc-y346.jpg "height=" 547 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m02/6f/bc/wkiom1wmfvkjod-gaads0v-wnys600.jpg "height=" 624 "/>

Similarly, when the vnet02 gateway is created, go to the local network to modify the ToVnet02 VPN IP address;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6F/BC/wKiom1WmfvOSeDoUAAF0G-fALsc689.jpg "height=" 311 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6F/BC/wKiom1WmfvPAnOzeAAEAO5V4InA529.jpg "height=" 650 "/>

At this point we need to s2s the Ipsec/ike Key under Azure Powershell configuration;

1) Import the Azure public configuration file first;

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6F/BC/wKiom1WmfvSQbEz5AANitLPf4JA589.jpg "height=" 286 "/>

2) which subscription ID to select

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6F/BC/wKiom1WmfvSRGMlqAABhCVP1TDg866.jpg "height="/>

3) Configure Azure Virtual Gateway key, two virtual network gateways must be the same.

PS: The format of this key is not allowed for special symbols, the length is also required. It is recommended that you view the management key of the gateway as the key for Ipsec/ike.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6F/BC/wKiom1Wmf3WjpyxoAALG0BlifdY789.jpg "height=" 427 "/>

4) We see in Azure that S2S is connected, and by default there is a time to retry the connection, we can manually connect the S2S.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/6F/B9/wKioL1WmgNDTy3-WAAFVQA3Td9Q990.jpg "height=" 467 "/>

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/6F/BC/wKiom1WmfvbBUFN0AAFkY0qBGx8361.jpg "height=" 491 "/>

Let's try to ping the virtual machines in VNET01VM and VNET02VM if they can communicate.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;margin:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/6F/BC/wKiom1WmfvfQ3jv3AAVcpiKNlV4873.jpg "height=" 492 "/>

This article from "Gs_hao" blog, declined reprint!

Mutual communication between different subscriptions for Windows Azure