Azure Virtual Network For Beginners – Securing Your Applications Using VPC

Recommended by 28 users

Aug 22, 2017
Azure Virtual Network For Beginners – Securing Your Applications Using VPC
Add to Bookmark Email this Post 1.3K    0

Welcome to this blog on Azure Virtual Network. In this blog, you will learn how to secure your application using Azure Virtual Network. Before moving on, let’s first understand, why do we need virtual networks in the first place.

Why Virtual Networks?

Virtual Networks act as a communication channel between resources launched in the cloud. Why Virtual? Because there are no actual routers or switches in the cloud. For example, if you launch a database server and a website server in the cloud, they would need a medium to interact. This medium of interaction is called  a Virtual Network. 

With Virtual Network:

With Virtual Network - Virtual Networks - Edureka

Get Azure Certified!

What is an Azure Virtual Network?

Azure Virtual Network (VNet) is a representation of your own network in the cloud. It is a logical isolation of the Azure cloud dedicated to your subscription.

Virtual Networks - Azure Virtual Networks - Edureka

You saw some heavy words in the definition such as, “logical isolation” and “representation of your own network”. Forget the definition for a minute, and just remember this:

If two computers have to interact with each other, they need to have permissions. You can add/remove these permissions in the virtual network settings. Once these permissions are added, just include these computers in this virtual network and voila! You are set. These three lines are the summary to what we’ll be accomplishing today.

You may go through this recording of Azure Virtual Network where our instructor has explained the topics in a detailed manner with examples that will help you to understand this concept better.

Azure Virtual Network Tutorial | Azure Training | Edureka Live


Moving on, a Virtual Network is further divided into components. 

Virtual Network Components

Following are the virtual network components:

  • Subnets
  • Network Security Groups

Learn Azure From Professionals!

What are Subnets?

Subnet - Azure Virtual Networks - Edureka


Each Virtual Network can be divided into sub parts, these sub parts are called subnets.


A subnet can further be divided into:

  • Private Subnet – A network in which there is no internet access.
  • Public Subnet – A network in which there is internet access.

Let’s look at an example and understand how Virtual Networks are actually used:

Subnets - Azure Virtual Networks - Edureka

In the above image, a single virtual network has been divided into subnets and each subnet contains a server.

  • Subnet A is a webserver and hence it is a public subnet because your website will be accessible over the internet.
  • Subnet B is a database server and since a database should just be able to connect to the webserver, there is no need of an internet connection, hence it is a private subnet.

You might be wondering, where to do all these settings, which connections to allow and which not to, right? Well, that is where the second component comes into the picture i.e the Network Security Groups.

Network Security Groups

This is where you do all your connection settings, like which ports to open, by default all are closed. Don’t get scared, this blog will guide you through all the settings, and all of them are very easy to configure.

But first, let me show you how the final architecture for a Virtual Network looks like:

Architecture - Virtual Networks Tutorial - Edureka

This is how Virtual Network works:

  • First you create a virtual network.
  • Then, in this virtual network you create subnets.
  • You associate each subnet with the respective Virtual Machines or Cloud Instances.
  • Attach the relevant Network Security Group to each subnet.
  • Configure the properties in the NSGs and you are set!

Let’s try this with a demo now.

Learn Azure From Professionals!


We will deploy two servers inside a Virtual Network, a database and a website server which shall be interacting with each other. Let’s see how we can architect this network.

Step 1: First, we will create a network security group. Go to your Azure dashboard, and follow the steps in the image below.

Select NSG - Azure Virtual Networks - Tutorial

Step 2: Next, you will reach this screen, wherein you will be filling all the details inside your NSG, and finally click on “Create”. Notice in the image at the second step, you are creating a resource group. Try putting all your resources inside the same group so that it becomes easier to manage.

Create NSG - Azure Virtual Networks Tutorial - Edureka

Step 3: We will now create a Virtual Network, follow the instructions in the below image to create one. Remember, in the resource group select “use existing”, and then select the same resource group that you created earlier.

Create VNet - Virtual Networks Tutorial - Edureka


Learn Azure Now!

Step 4: Next, we will be creating 2 subnets, one for our website and one for our database. Follow the steps in the images below:

Create Subnet - Virtual Networks Tutorial - Edureka

Step 5: On the next screen, create two subnets. Following the same steps, one for database and one for webserver. Also, attach the respective network security groups.

Create Subnet2 - Virtual Networks Tutorial - Edureka

Step 6: Alright, our network is set, all we have to do now is configure the Network Security Groups and create our servers inside this virtual network. Let’s create the webserver first.

Add VM - Azure Virtual Networks Tutorial - Edureka

Step 7: On the next screen, select an OS of your choice. For our demo, we will select an Ubuntu OS. Finally click on Create.

Create VM1 - Virtual Networks Tutorial - Edureka

Step 8: Enter all the relevant information on the first page:

Create VM2 - Virtual Networks Tutorial - Edureka

Next, select the relevant configuration. We are selecting the most basic configuration since this is a demonstration:

Create VM3 - Virtual Networks Tutorial - Edureka

Learn Azure From Professionals!

Step 9: On the next page, you will be selecting the virtual network, in which you want your virtual machine to be deployed.

Create VM4 - Virtual Networks Tutorial - Edureka

Next, select the subnet:

Create VM5 - Virtual Networks Tutorial - Edureka

Open the network security group pane, and select the “None” option, since we have already attached the Network Security Group to our Virtual Network. Finally, click Ok, and your VM will start deploying. Do the same for your DB Server as well.

Create VM6 - Virtual Networks Tutorial - Edureka

Step 10: You can go through the videos attached in the beginning of the blog to understand how to configure a webserver and a DB server, they will guide you how to do the same. Let me show you how my Network Security Group for webserver looks like as of now:

NSG - Virtual Networks Tutorial - Edureka

Since there is nothing added as of now in the inbound security rules, if I try to connect to my server using the IP address, I get the following error:

NSG1 - Virtual Networks Tutorial - Edureka

Step 11: To add any connection property follow the below image:

NSG2 - Virtual Networks Tutorial - Edureka

I have added the following connections:

For accessing your website you need to add HTTP and HTTPS. Finally, you would need SSH for configuring your server. I will get the following screen if I try to connect now for my webserver:

NSG5 - Virtual Networks Tutorial - Edureka

And this is the SSH window:

NSG3 - Azure Virtual Network Tutorial - Edureka

Step 12: This is how my database Network Security Group looks like:

NSG6 - Azure Virtual Network Tutorial - Edureka

For the detailed demo, you can refer the videos in the beginning of the blog. Rest assured, this is the way you will configure your virtual network.

Get Certified Today!

Want to learn more? We at edureka! have come up with a curriculum which covers exactly what you would need to crack the Microsoft Exams! You can have a look at the course details for Microsoft Azure training here. 

Furthermore, this Azure Virtual Network blog series will be updated frequently as we expand our blog section on Azure services, so stay tuned!

Got a question for us? Please mention it in the comments section of this Azure Virtual Network Blog and we will get back to you.

Share on