Open lab
A free hub-and-spoke lab with no goals. vnet-hub has the appliance fw-hub at 10.0.2.4, both spokes are peered to it, and nothing routes between spokes yet. Break things, fix them, try any command.
How to use the sandbox
Nothing here is graded. Build anything, break things on purpose, and watch what happens on the map.
Start from
What you can do- Create: in the Portal, open Create for networks, VMs, NSGs, route tables, resource groups and subscriptions.
- Change or delete: tap anything on the map. Its actions, including Delete, open in the Portal. Azure's real rules apply, so an attached NSG can't be deleted until you detach it.
- Watch traffic: add a connection below. It turns green or red on the map after every change, and Explain walks it hop by hop.
Use Cloud Shell or the Portal, whichever you like. Type help for every command. Reset, at the bottom, puts the lab back the way it started.
Optional challenges
- Get vm-spoke1 to vm-spoke2 on 443, through fw-hub
Nudge
Each spoke needs a route to the other spoke with fw-hub (10.0.2.4) as the next hop. One direction isn't enough, the reply needs its way back. - Then keep vm-spoke1 out of vm-spoke2 on 22, while 443 still works
Nudge
Nothing filters vm-spoke2 yet. Put an NSG on its subnet with a rule that denies 22 from vnet-spoke1 at a lower priority number than the default AllowVnetInBound rule. - Add vnet-spoke3 (10.3.0.0/16) with a subnet, peered to the hub on both sides
Nudge
Create the VNet with a subnet, then two peering links: one on vnet-spoke3 and one on vnet-hub, both with VNet access allowed.
Network map
?
- Resource group, the outer dashed frame
- Virtual network, with its address space top right
- Subnet, with range and usable IPs (5 reserved)
- Network security group. A small shield on a VM's NIC means the NIC has one too
- Route table on the subnet
- VM Appliance Private endpoint
- Peering Connected Initiated or access off
- Goal working Goal broken, X marks where it stops
- Private DNS zone, dotted lines go to linked VNets
- Orange pulse: what your last command changed. Drag to pan, Ctrl and scroll to zoom.
Cloud Shell · bashVMsrg-lab · eastus2
cloudshell:~$