Create a Hub-Spoke Network Topology in Azure

1 hour
  • 2 Learning Objectives

About this Hands-on Lab

Your company has a lot of redundant services (DNS, AD, intrusion detection, etc.) in their environment. To alleviate the management effort in maintaining those services, your IT department is centralizing all redundant services into a hub. You will implement a hub-spoke topology, creating a hub VNet and a spoke VNet connection in Azure.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Configure the Virtual Network Gateway
  1. In the Azure portal, click All resources.
  2. Select the VPN00-HUB gateway and click Configuration.
  3. Verify that the SKU is VpnGw2 for 1 Gbps throughput.
  4. Select the VPN41-SPOKE gateway and click Configuration.
  5. Verify that the SKU is VpnGw2 for 1 Gbps throughput.
Add a Gateway Connection
  1. Within the VPN41-SPOKE gateway settings, click Connections.

    1. Click + Add.
    2. On the Add connection page, set the following values:
    • Name: spoke-to-hub-connection
    • Connection type: VNet-to-VNet
    • Second virtual network gateway: VPN00-HUB
    • Shared key (PSK): Shared key from the lab homepage
    1. Leave the rest as their defaults and click OK.
    2. Select the VPN00-HUB gateway and click Connections.
    3. Click + Add.
    4. On the Add connection page, set the following values:
    • Name: hub-to-spoke-connection
    • Connection type: VNet-to-VNet
    • Second virtual network gateway: VPN41-SPOKE
    • Shared key (PSK): Shared key from the lab homepage
    1. Leave the rest as their defaults and click OK.

Once the Status field displays Connected for both connections, we’ve successfully finished creating our hub-spoke network topology.

Note: Connection status may not update until you leave the page. To update the status, click Home > All resources > VPN00HUB > Connections. You may need to repeat this multiple times.

Additional Resources

When you log in to Azure, you will see a hub VNet with a VPN gateway named VPN00-HUB and a spoke VNet with a VPN gateway named VPN41-SPOKE.

Verify that the gateway is configured for throughput of 1 Gbps.

Create a connection between the two VPN gateways, choosing VNet-to-VNet as the connection type.

Pre-shared key: 1c220hv57gr8fhnt

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?