Azure virtual network peering 微软云不同租户虚拟网络之间peering

Azure virtual network peering 微软云不同租户虚拟网络之间peering

Azure virtual network peering between two different account ( in this scenario, two diferent accunt but in the same region)

场景两个不同的账号下,在相同的区域(South Asia)下进行 peering, 这样两个不同的virtual network 之间进行通信，类似于AWS VPC peering

账号A 10.0.0.0/16 网络账号B 192.168.0.0/16 网络

要peering 对方必须有对方网络方面的权限，这个我看很多文档，好像都没有说清楚

这时候，要去virtual network给对方账号加Network Contributor权限,

具体来说就是在自己的virtual network里，给对方的账号加Network Contributor 权限

1.3 Account A Home-Virutal Network -"test1" <--- 10.0.0.0/16 network in A Access Control(IAM)-Role assignments

Add-role assignment Role-Network ContritutorSelect B mail account.

1.4 account B

Home-Virutal Network -"test1" <--- 192.168.0.0/16 network in BAccess Control(IAM)-Role assignmentsRole-Network ContritutorSelect A mail account.

权限问题搞定了，我们可以创建peering 了1.5 Login Account A. Peering to account B Virutal-network-"test1"-peering"-"Add"Peering link name: 10_0_0_0_16  <---- this account local network

Remote link name: 192_168_0_0_16 <--- remote virtual network (account B)

check "I know my resource ID"

Copy the resource ID from account B network

#how to get the resource ID of remote network in account B.

#login B account

#Home-virtual networks-192_168_0_0_16-properties.

after this, the peering will be in "inital" status.

1.6 Loggin Account B.  Peering to account A

Virutal-network-"test1"-peering"-"Add"Peering link name: 192_168_0_0_16  <---- this account local network

Remote link name: 10_0_0_0_16 <--- remote virtual network (account A)

check "I know my resource ID"

Copy the resource ID from account A network

当建好之后，可以看到peering 状态是connected 了。 你可以互相ping 了

Account A 10.0.0.4

Account B 192.168.100.4

azureuser@Ubuntu-10-net:~$ ifconfig eth0 | grep inet        inet 10.0.0.4  netmask 255.255.255.0  broadcast 10.0.0.255        inet6 fe80::222:48ff:fe58:b8c5  prefixlen 64  scopeid 0x20azureuser@Ubuntu-10-net:~$ ping 192.168.100.4PING 192.168.100.4 (192.168.100.4) 56(84) bytes of data.64 bytes from 192.168.100.4: icmp_seq=1 ttl=64 time=1.98 ms64 bytes from 192.168.100.4: icmp_seq=2 ttl=64 time=1.15 ms64 bytes from 192.168.100.4: icmp_seq=3 ttl=64 time=0.975 ms^C--- 192.168.100.4 ping statistics ---3 packets transmitted, 3 received, 0% packet loss, time 2003msrtt min/avg/max/mdev = 0.975/1.369/1.981/0.438 msazureuser@Ubuntu-10-net:~$

#参考文档

#Configuring VNet Peering From Different Azure Active Directory Tenantsthe Network Contributor Role - AzureAzure peeringguest users to the directoryhttps://docs.microsoft.com/en-us/azure/active-directory/external-identities/add-users-administrator?toc=/azure/virtual-network/toc.json#add-guest-users-to-the-directory

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。