Networking: Peering and VWAN

Question 1

VNet peering

Answer 1

Virtual network peering enables you to seamlessly connect two Azure virtual networks (private connections). Once peered, the virtual networks appear as one, for connectivity purposes.

Question 2

Regional VNet peering

Answer 2

connects Azure virtual networks in the same region.

Question 3

Global VNet peering

Answer 3

connects Azure virtual networks in different regions. When creating a global peering, the peered virtual networks can exist in any Azure public cloud region or China cloud regions, but not in Government cloud regions.

Question 4

Benefits of VNet Peering Privacy

Answer 4

Network traffic between peered virtual networks is private.

Question 5

VNet Peering: Gateway Transit options

Answer 5

Use a site-to-site VPN to connect to an on-premises network.

Use a VNet-to-VNet connection to another virtual network.

Use a point-to-site VPN to connect to a client.

Question 6

Create and Test Virtual Network Peering (4 Steps)

Answer 6

Create two virtual networks.

Peer the virtual networks.

Create virtual machines in each virtual network.

Test the communication between the virtual machines.

Question 7

VNet Peering: Service Chaining

Answer 7

VNet Peering is nontransitive. (if VNet1 and Vnet2 are peered, Vnet2 and Vnet3 are peered, Vnet1 and Vnet3 are NOT peered)

user-defined routes and service chaining can provide the transitivity.

Service chaining lets you define user routes. These routes direct traffic from one virtual network to a virtual appliance, or virtual network gateway.

Question 8

VWAN Basic

Answer 8

Basic hub type

Site-to-Site VPN configuration only

Question 9

VWAN standard

Answer 9

Standard hub type

ExpressRoute, User VPN (P2S). VPN (site-to-site), Inter-hub, and VNet-to-VNet transiting through the virtual hub.

Question 10

Benefits of VNet Peering - Performance

Answer 10

Performance. A low-latency, high-bandwidth connection between resources in different virtual networks.

Question 11

Benefits of VNet Peering - Communication

Answer 11

The ability for resources in one virtual network to communicate with resources in a different virtual network

Question 12

Benefits of VNet Peering - Seamless

Answer 12

The ability to transfer data across Azure subscriptions, deployment models, and across Azure regions.

No disruption. No downtime to resources in either virtual network when creating the peering, or after the peering is created.

Question 13

VWAN

Answer 13

Virtual WAN is an Azure Networking Service that brings many networking, security, and routing functionalities together to provide a single operational interface

Question 14

VWAN Architecture

Answer 14

hub and spoke architecture with scale and performance built in for branches (VPN/SD-WAN devices), users (Azure VPN/OpenVPN/IKEv2 clients), ExpressRoute circuits, and virtual networks.

Question 15

VWAN Resources: virtualWAN

Answer 15

represents a virtual overlay of your Azure network and is a collection of multiple resources

Question 16

VWAN Resources: Hub

Answer 16

A virtual hub is a Microsoft-managed virtual network.

The hub contains various service endpoints to enable connectivity.

Question 17

VWAN Resources: Hub virtual network connection

Answer 17

The Hub virtual network connection resource is used to connect the hub seamlessly to your virtual network. One virtual network can be connected to only one virtual hub.

Question 18

VWAN Resources: Hub-to-Hub connection

Answer 18

Hubs are all connected to each other in a virtual WAN.

You can connect VNets within a hub transiting through the virtual hub, as well as VNets across hub, using the hub-to-hub connected framework.

Question 19

VWAN Resources: Hub Route Table

Answer 19

You can create a virtual hub route and apply the route to the virtual hub route table. You can apply multiple routes to the virtual hub route table.

Question 20

VWAN Connection Configurations: Site-to-SiteVPN

Answer 20

You can connect to your resources in Azure over a Site-to-site IPsec/IKE (IKEv2) connection.

This type of connection requires a VPN device or a Virtual WAN Partner device.

Question 21

VWAN Connection Configurations: User VPN (Point-to-site)

Answer 21

You can connect to your resources in Azure over an IPsec/IKE (IKEv2) or OpenVPN connection.

This type of connection requires a VPN client to be configured on the client computer.

Question 22

VWAN Connection Configurations: ExpressRoute Connections

Answer 22

ExpressRoute lets you connect on-premises network to Azure over a private connection. To create the connection, see Create an ExpressRoute connection using Virtual WAN.

Question 23

VWAN Connection Configurations: Hub-to-VNet Connections

Answer 23

You can connect an Azure virtual network to a virtual hub.