Describe Azure Virtual Networking Unit 8/14

Möller, Jörg 81 Reputation points
2023-02-13T09:06:37.3366667+00:00

In the chapter "Isolation and segmentation" is mentioned the following 2 sentences:

https://video2.skills-academy.com/en-us/training/modules/describe-azure-compute-networking-services/8-virtual-network

"When you set up a virtual network, you define a private IP address space by using either public or private IP address ranges. The IP range only exists within the virtual network and isn't internet routable."

This I do not understand.

Can I define a public IP adress range on a VNET and it stays "internally" and traffic is not (per default) communicating with the internet so that it does not conflict with a public IP that is existing?

And second: Am I also right that if Internet Access is required then I must establish the appropriate Firewallrules?

Azure Training
Azure Training
Azure: A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.Training: Instruction to develop new skills.
1,241 questions
0 comments
Accepted answer
  1. deherman-MSFT 35,011 Reputation points Microsoft Employee
    2023-02-17T19:58:38.33+00:00

    @Möller, Jörg

    Thanks for your question and apologies for the delayed response. Yes, you can choose public or private IP addresses when creating your VNET. Whether you define the address range as public or private, the address range is reachable only from within the virtual network, from interconnected virtual networks, and from any on-premises networks that you've connected to the virtual network.

    While it is possible to use public IP addresses, we recommend that you use the address ranges enumerated in RFC 1918, which have been set aside by the IETF for private, non-routable address spaces:

    • 10.0.0.0 - 10.255.255.255 (10/8 prefix)
    • 172.16.0.0 - 172.31.255.255 (172.16/12 prefix)
    • 192.168.0.0 - 192.168.255.255 (192.168/16 prefix)

    Firewall rules are not required for outbound access on your VNET, however you will need to have the appropriate Network Security Group configured to allow the access. By default Virtual machines created in a virtual network without explicit outbound connectivity defined are assigned a default outbound public IP address. This IP address enables outbound connectivity from the resources to the Internet. This access is referred to as default outbound access.

    Hope this answers your question! Let us know if you need further clarification and we will be happy to help!

    Please don’t forget to "Accept the answer" wherever the information provided helps you, this can be beneficial to other community members.

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest