If you want to place the network hub in Microsoft Azure, you must deploy the network hub from the Microsoft Azure Resource Manager template named Veeam PN. The template lets you deploy a 64-bit Linux virtual appliance on which Veeam PN components are set up. You can then configure the appliance as the network hub.
To deploy and set up the network hub, you must perform the following steps:
You can deploy the network hub using the Azure Resource Manager model only. You cannot use the Classic deployment model.
To deploy a network hub appliance from the Microsoft Azure template:
- Sign in to the Microsoft Azure portal at https://portal.azure.com.
- In the menu on the left, click New.
- In the marketplace, search for the 'Veeam PN for Microsoft Azure' template.
- Select the template and click Create.
- On the Basics blade, specify basic VM settings: VM name, user credentials for the network hub administrator account, subscription, resource group and location.
- Click OK.
- On the Veeam PN Settings blade, specify settings for the network hub:
- In the Virtual machine size section, select the VM size. Make sure that the VM configuration meets minimal requirements to the network hub. For details, see System Requirements.
- In the Storage account section, select a storage account whose resources you want to use to store disks of the network hub appliance.
- In the Public IP address section, enter a public IP address for the network hub appliance. The network hub appliance will be accessible by this IP address.
- In the Domain name for VeeamPN section, enter a domain name for the network hub appliance. The network hub appliance will be accessible by this domain name.
- In the Virtual network section, specify to which Microsoft Azure network the network hub appliance must be connected.
- In the Subnet section, specify a subnet to which the network hub appliance must be connected.
- Click OK.
- Veeam PN uses a self-signed SSL certificate to enable secure data communication in the VPN. On the Certificate Information blade, specify parameters for the SSL certificate that Veeam PN must generate: your company details, certificate lifetime (validity) and certificate key length (dhBits).
- On the VPN Information blade, specify VPN settings for the network hub:
- To implement the site-to-site scenario, in the Enable Site-to-Site field, click Yes. In the Specify a protocol field, specify a protocol that you want to use for communication between VPN components: UDP or TCP. In the Specify a port field, specify a port on which the network hub must listen for site gateway connections. By default, port 1194 is used.
- To implement the point-to-site scenario, in the Enable Point-to-Site field, click Yes. In the Specify a protocol field, specify a protocol that you want to use for communication between VPN components: UDP or TCP. In the Specify a port field, specify a port on which the network hub must listen for standalone computer connections. By default, port 6179 is used.
- Click OK.
It is recommended that you use the UDP protocol. While TCP guarantees delivery of data packets, UDP ensures faster data transmission since it does not require any data flow control.
- On the Summary blade, review details of the network hub and click OK.
Veeam PN will deploy the network hub from the Microsoft Azure template. The deployment process typically takes several minutes. Wait for this process to complete and proceed to the network hub configuration.
After you deploy the network hub from the Microsoft Azure template, you must configure initial settings for the network hub.
To configure initial network hub settings:
- In the Microsoft Azure portal, open properties of the newly deployed appliance and get an IP address of the appliance.
- In a web browser, access the network hub portal by the following address: https://<networkhubIP>, where <networkhubIP> is the IP address of the network hub deployed in Microsoft Azure.
When you access the network hub portal in the web browser, the browser will display a warning notifying that the connection is untrusted. Ignore the warning and agree to proceed to the portal.
- At the Welcome screen of the portal, log in to the network hub portal under the network hub administrator account. You specified credentials for the network hub administrator account on the Basic blade when you deployed the network hub appliance from the Microsoft Azure template.
- Click Login.
- On the welcome screen of the Azure Setup wizard, click Next.
- Veeam PN requires that you authenticate in Microsoft Azure Active Directory. The Azure Setup wizard will display the https://aka.ms/devicelogin link and an authentication code. Copy the code to the Clipboard, open the https://aka.ms/devicelogin link in a web browser and enter the code in the code field.
- Click Next.
- Veeam PN will proceed with configuring the network hub settings and assign the Network Contributor role on the routing table in the Microsoft Azure network to the network hub administrator account. Wait for the process to complete and click Finish.
To pass through the Azure Setup wizard once again, in the Veeam PN portal open the Settings view, click the Azure tab and click Apply at the bottom of the page.
What You Do Next
After you configure the network hub, you must perform the following steps:
- You must log in to the network hub portal using the following address: https://<networkhub>/ and configure settings for clients — on-premises networks (site-to-site scenario) and standalone computers (point-to-site scenario). For more information, see Configuring Clients.
- If necessary, you can change the network hub settings, for example, configure alerts, enable SSH access to the network hub appliance and so on. For more information, see Configuring Network Hub Settings.