Name Title Microsoft Windows Azure Virtual Networks Agenda LB VIP: Input Endpoint Internal Endpoint foo.cloudapp.net VIP LB Load balanced Input Endpoint Internal Endpoints Single Input Endpoint Single Public IP Per Cloud Service LB VM Azure Agent Customer Application Azure Agent Customer Application Role Status LB VM Azure Agent Customer Application Azure Agent Customer Application Role Status Secure Site-to-Site Network Connectivity Windows Azure Virtual Network Data Synchronization SQL Data Sync Application-Layer Connectivity & Messaging Service Bus Secure Machine-to- Machine Connectivity Windows Azure Connect A. Client-server applications using VMsB. Hybrid connectivity with on-premise (DNS on-premise) C. SharePoint with custom DNS (VM) SQL Reporting Service SQL Analysis Service SQL Service Active Directory SQL Service Domain joined to On- Premises Network On-Premises Machine Business Components & Entities On-Premises Machine UI Process Components Web Tier Active Directory Internet VM Role SharePoint FrontEnd VM Role SharePoint FrontEnd VM Role Search and Indes SQL Service VM Role DC DNS VM Role SQL VM Role SQL Local DNS SQL Mirroring LB Open User Access (Website) Who is TestVM2? / / / / VM Role Business Components & Entities Disk SQL SQL Mirroring Web Role LB IT Admin Network Admin SQLSubnet ( /24) GW IP CorpOffice Network configuration Deployment package Cisco PlatformOS FamilyExamples ASA 5500 Series (Adaptive Security Appliances) ASA Software , 5550 ASR 1000 Series Aggregation Services Routers IOS XE ISR Series Integrated Services Routers IOS , 2901, 2911 Juniper PlatformOS FamilyExamples SRX Series RoutersJunOS , 650 J Series RoutersJunOS ISG Series RoutersScreenOS 6.2+SX2 SSG Series RoutersScreenOS Generic VPN devices must support: IKE v1 AES 128, 256 SHA1, SHA2 Add URL to public list Only single IPsec tunnel supported per Virtual Network Gateway tenant on Azure side has 2 instances (active-passive mode) Only one public IP address for tunnel establishment A pair of VPN devices can be a redundant pair using industry standard protocols HSRP VRRP Virtual NetworkCross-prem connectivity Networks in customers premises Virtual Networks in Windows Azure Windows Azure Traffic Manager LB VIP Input Endpoint Internal Endpoints 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.