Labs : M02 Unit 3 Create and configure a virtual network gateway

🔷 Master Azure VPN Gateway configuration in this comprehensive AZ-700 certification lab walkthrough!

In this hands-on tutorial, you'll learn how to create and configure virtual network gateways to establish VNet-to-VNet connectivity between CoreServicesVnet (East US) and ManufacturingVnet (West Europe). Complete step-by-step guide from deployment to testing!

📚 WHAT YOU'LL LEARN:
✅ Deploy VNets and VMs using ARM templates
✅ Create virtual network gateways (VPN Gateway)
✅ Configure GatewaySubnet manually
✅ Establish VNet-to-VNet VPN connections
✅ Configure IPsec/IKE VPN tunnels
✅ Test connectivity between VMs across VPN
✅ Understand VPN Gateway SKUs and settings
✅ Troubleshoot VPN Gateway connections

🏗️ LAB ARCHITECTURE:
• CoreServicesVnet (East US) - 10.20.0.0/16
CoreServicesVM + GatewaySubnet (10.20.0.0/27)
• ManufacturingVnet (West Europe) - 10.30.0.0/16
ManufacturingVM + GatewaySubnet (10.30.0.0/27)
• VPN Gateways: VpnGw1 SKU, Generation1
• VNet-to-VNet connections with shared key (PSK)
• IKEv2 protocol for secure tunneling

⏱️ TIMESTAMPS:
0:00 - Introduction & Lab Overview
0:30 - Task 1: Deploy VNets and VMs with ARM Templates
3:35 - Task 2: Create CoreServicesVM
5:05 - Task 3: Create ManufacturingVM
6:12 - Task 4: Connect to the VMs using RDP
8:48 - Task 5: Test Connection WITHOUT VPN (FAILS)
9:47 - Task 6: Create CoreServicesVnet Gateway
10:56 - Task 7: Create ManufacturingVnet Gateway
13:00 - Task 8: Connect CoreServicesVnet to ManufacturingVnet
15:05- Task 9: Connect ManufacturingVnet to CoreServicesVnet
17:04 - Task 10: Verify that the connections connect
17:35 - Task 11: Test Connection WITH VPN (SUCCESS!)

🔗 RESOURCES:
📖 Official Lab Documentation:
https://microsoftlearning.github.io/AZ-700...

📁 ARM Template Files:
https://github.com/MicrosoftLearning/AZ-70...

📚 Microsoft Learn Modules:
• Connect on-premises network with VPN Gateway: https://learn.microsoft.com/training/modul...
• Troubleshoot VPN Gateways: https://learn.microsoft.com/training/modul...

💡 KEY CONCEPTS COVERED:
Azure VPN Gateway fundamentals
Virtual network gateway types (VPN vs ExpressRoute)
VPN Gateway SKUs (VpnGw1, VpnGw2, VpnGw3, etc.)
GatewaySubnet configuration and requirements
VNet-to-VNet connections (IPsec/IKE tunnels)
Site-to-Site (S2S) vs Point-to-Site (P2S) VPN
Shared key (PSK) authentication
IKEv2 protocol configuration
Active-active vs active-passive modes
BGP (Border Gateway Protocol) settings
Public IP address requirements
Gateway deployment timing and monitoring

🔧 POWERSHELL COMMANDS USED:
```powershell
Create Resource Group and deploy VNets
$RGName = "ContosoResourceGroup"
New-AzResourceGroup -Name $RGName -Location "eastus"
New-AzResourceGroupDeployment -ResourceGroupName $RGName -TemplateFile azuredeploy.json -TemplateParameterFile azuredeploy.parameters.json

Deploy VMs
New-AzResourceGroupDeployment -ResourceGroupName $RGName -TemplateFile CoreServicesVMazuredeploy.json -TemplateParameterFile CoreServicesVMazuredeploy.parameters.json

Test connectivity
Test-NetConnection 10.20.20.4 -port 3389

Get IP configuration
ipconfig