| title | Quickstart: Deploy a network topology with Azure Virtual Network Manager using Azure Resource Manager template - ARM template |
|---|---|
| description | In this article, you deploy various network topologies with Azure Virtual Network Manager using Azure Resource Manager template(ARM template). |
| services | virtual-network-manager |
| author | mbender-ms |
| ms.author | mbender |
| ms.date | 10/23/2024 |
| ms.topic | quickstart |
| ms.service | azure-virtual-network-manager |
| ms.custom | template-quickstart, subject-armqs, mode-arm, devx-track-arm-template |
Quickstart: Deploy a network topology with Azure Virtual Network Manager using Azure Resource Manager template - ARM template
Get started with Azure Virtual Network Manager by using Azure Resource Manager templates to manage connectivity for all your virtual networks.
In this quickstart, an Azure Resource Manager template is used to deploy Azure Virtual Network Manager with different connectivity topology and network group membership types. Use deployment parameters to specify the type of configuration to deploy.
[!INCLUDE About Azure Resource Manager]
If your environment meets the prerequisites and you're familiar with using ARM templates, select the Deploy to Azure button. The template opens in the Azure portal.
- An Azure account with an active subscription. Create an account for free.
- To support deploying Azure Policy for dynamic group membership, the template is designed to deploy at the subscription scope. However, it's not a requirement for Azure Virtual Network Manager if using static group membership.
The template used in this quickstart is from Azure Quickstart Templates
:::code language="json" source="~/quickstart-templates/subscription-deployments/microsoft.network/virtual-network-manager-connectivity/azuredeploy.json":::
The template defines multiple Azure resources:
- Microsoft.Network/virtualNetworks
- Microsoft.Resources/resourceGroups
- Microsoft.Resources/deployments
- Microsoft.Authorization/policyDefinitions
- Microsoft.Authorization/policyAssignments
- Microsoft.Network/networkManagers/networkGroups/staticMembers
- Microsoft.Network/networkManagers/networkGroups
- Microsoft.Network/networkManagers/connectivityConfigurations
- Microsoft.ManagedIdentity/userAssignedIdentities
- Microsoft.Authorization/roleAssignments
- Microsoft.Resources/deploymentScripts
-
Sign in to Azure and open the Azure Resource Manager template by selecting the Deploy to Azure button here. The template creates the instance of Azure Virtual Network Manager, the network infrastructure, and the network manager configurations.
-
In the Azure portal, select or enter the following information:
Setting Value Subscription Select the subscription to use for the deployment. Instance Details Resource Group Name Use the default of rg-avnm-sample Region Select the region to deploy the resources. Location Enter the location to deploy the resources. The location value is used in the resource naming convention
The location matches the Region you've chosen, and is written with no spaces. For example, East US is written as EastUS.Connectivity Topology Select the connectivity topology to deploy. The options include mesh, hubAndSpoke, and meshWithHubAndSpoke. Network Group Membership Type Select the network group membership type. The options include static and dynamic. -
Select Review + create to review the settings and read the terms and conditions statement.
-
Select Create to deploy the template.
-
The deployment takes a few minutes to complete. After the deployment is complete, the Deployment succeeded message appears.
-
From the Home page in the Azure portal, select Resource groups and select rg-avnm-sample.
-
Verify all of the components are deployed successfully.
:::image type="content" source="media/create-virtual-network-manager-template/template-resources.png" alt-text="Screenshot of all deployed resources in Azure portal.":::
-
Select the avnm-EastUS resource.
-
In the Network Groups page, select Settings > NetworkGroups > ng-EastUS-static.
-
On the ng-EastUS-static page, select Settings>Group Members and verify a set of virtual networks are deployed.
:::image type="content" source="media/create-virtual-network-manager-template/mesh-group-members.png" alt-text="Screenshot of static members in network group for a static topology deployment.":::
Note
Depending on the selections you made for the deployment, you may see different virtual networks for the group members.
When you no longer need the resources that you created with the private endpoint, delete the resource group. Doing so removes the private endpoint and all the related resources.
- To delete the resource group, open the resource group in the Azure portal and select Delete resource group.
- Enter the name of the resource group, and then select Delete.
- One the resource group is deleted, verify the network manager instance and all related resources are deleted.
- If you used Dynamic Network Group Membership, delete the deployed Azure Policy Definition and Assignment by navigating to your Subscription in the Portal and selecting the Policies. In Policies, find the Assignment named
AVNM quickstart dynamic group membership Policyand delete it, then do the same for the Definition namedAVNM quickstart dynamic group membership Policy.
For more information about deploying Azure Virtual Network Manager, see:
[!div class="nextstepaction"] Quickstart: Create a mesh network topology with Azure Virtual Network Manager using Terraform