Learn Cloud NetAzure networking, beginner to advanced0 XP0/80

Learn Cloud Net

Learn Azure networking by fixing it.

It takes you from your first virtual network to hub-and-spoke routing and private endpoint DNS. You type real Azure CLI commands into a simulated Cloud Shell, watch a live network map react, and fix real Azure networking issues.

Start learning

Free, no account, no Azure subscription needed. Progress saves in your browser.

Intermediate · HTTPS blocked despite an allow rule cloudshell:~$ az network watcher test-ip-flow -g rg-lab --vm vm-web --direction Inbound --protocol TCP --local 10.1.1.4:443 --remote 10.1.2.4:* { "access": "Deny", "ruleName": "securityRules/Deny-All-Inbound" } cloudshell:~$ az network nsg rule update -g rg-lab --nsg-name nsg-web --name Allow-HTTPS-Client --priority 150 --query priority 150 cloudshell:~$ ssh vm-client lab: connected to vm-client (10.1.2.4) through the lab's management path. Type exit to return to Cloud Shell. azureuser@vm-client:~$ nc -zv 10.1.1.4 443 Connection to 10.1.1.4 (10.1.1.4) 443 port [tcp/*] succeeded!

Beginner to advanced, in four tiers

80 levels. Start at the beginning, or pick the tier that matches what you already know.

How it works

Real commandsThe terminal speaks a real subset of az network. What you type here works against a real subscription.
Checked by outcomeLevels check the network you end up with, not the exact command, so any valid fix passes, the way real troubleshooting works.
Sourced from Microsoft LearnEvery rule the simulator follows comes from Microsoft Learn, and each level links the pages behind it.