WindowsAzure cross-site VPN-Basic High Availability function!

Source: Internet
Author: User

WindowsAzure cross-site VPN-Basic High Availability function!
The previous blog wrote about how to create a common application with high cross-site availability. However, in most cases, our applications are applications with a three-tier architecture. For these applications, in addition to the data access layer, our applications also have the data storage layer. For our applications, data storage is more important. At present, most enterprises in the Internet era use Linux servers as the underlying servers of basic applications. Most databases use MYSQL as the backend database, and in most application scenarios, our databases adopt the master-slave mode, so that the connectivity across data centers becomes very important. After our data connectivity, our network connectivity can lay a solid foundation for subsequent machine interoperability.
How can this problem be solved? Let's simulate a scenario. assume that we have a data network in the east data center with the address field: 10.1.0.0/16, and a data network in the north. The network address field is 10.2.0.0/16. we need to connect the two data centers. How can this problem be solved? Follow Me.
Final Implementation diagram:






Next we will take you through all the applications. First, we need to establish two different regional networks. First, we establish different regional networks in the east and north. First, we will establish the following in the east:

Click "region network", create a new one, and enter the network name "East ".

Select DNS Server

Create related subnets:

Review the created virtual network:

 

 

 

Follow the same steps to create a virtual network in the north. The subnet is 10.2.0.0/16:

Next, we have established a local network. The procedure for establishing a local network is relatively simple. We have created a local network directly:

 

 

 

 

Click Add local network:

You must enter the IP address of the Gateway. Otherwise, the VPN cannot be started. You can enter an IP address. After the corresponding gateway IP addresses are created, we can change them to the correct IP Address:

 

Verify the corresponding IP address segment and click Create:

Similarly, we need to create a local network in the Northern Region:

 

After creation, we Review the network list that has been created:

Next, configure the VPN connection from the site to the site. Click the VPC in the east:

 

Select the corresponding connection network, connecting the east to the north and connecting the north to the east. Then click Create Gateway:

 

Similarly, we create a site connection from the north to the east and click Save:

Next we will create a gateway and select Dynamic Routing:

Select to create a dynamic route Gateway:

 

To create a gateway, perform the following operations on the Northern region:

After the gateway is created, an external IP address is displayed. Here we copy the IP Address:

 

 

 

The connection to the north is also started like this, and there will also be an IP Address:

Next, we need to change our local network address to the correct gateway IP Address:

 

 

Set the VPN address of our local network and follow the same steps to update the vpn device address in the Northern Region:

Let's Review the corresponding link:

 

 

 

 

 

Next, we start to connect to the corresponding network. Now we click the link:

Next we will run Powershell to synchronize the keys on both sides. We will execute similar commands for different networks. The command is as follows ,:

Set-AzureVNetGatewayKey-VnetName north-LocalNetworkSiteName east-SharedKey A1b2C3D4

Set-AzureVNetGatewayKey-VNetName east-LocalNetworkSiteName north-SharedKey A1b2C3D4

First, open azure powershell.

Run the following two commands:

Next, let's take a look at the connection. We are pleasantly surprised to find that we are connected:

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.