docs: Add RG split, nginx install via Run Command, and web test for dual-stack article

Author: asudbring

articles/virtual-network/ip-services/create-vm-dual-stack-ipv6-portal.md

@@ -47,8 +47,26 @@ If you choose to install and use PowerShell locally, this article requires the A
 
 In this section, you create a resource group and dual-stack virtual network for the virtual machine in the Azure portal.
 
+### Create a resource group
+
 1. Sign-in to the [Azure portal](https://portal.azure.com).
 
+1. In the portal, search for and select **Resource groups**.
+
+1. Select **+ Create**.
+
+1. On the **Basics** tab, enter or select the following values:
+
+    | Setting | Value |
+    | ------- | ----- |
+    | **Subscription** | Select your subscription. |
+    | **Resource group** | Enter *myResourceGroup*. |
+    | **Region** | Select **(US) East US 2**. |
+
+1. Select **Review + create**, and then select **Create**.
+
+### Create a virtual network
+
 1. In the search box at the top of the portal, enter **Virtual network**. Select **Virtual networks** in the search results.
 
 1. Select **+ Create**.
@@ -59,7 +77,7 @@ In this section, you create a resource group and dual-stack virtual network for
     | ------- | ----- |
     | **Project details** |   |
     | Subscription | Select your subscription. |
-    | Resource group | Select **Create new**. </br> In **Name**, enter **myResourceGroup**. </br> Select **OK**. |
+    | Resource group | Select **myResourceGroup**. |
     | **Instance details** |   |
     | Name | Enter **myVNet**. |
     | Region | Select **East US 2**. |
@@ -548,65 +566,173 @@ New-AzVM @vm -GenerateSshKey
 
 ---
 
-## Test SSH connection
+## Install nginx
+
+In this section, you create a network security group rule to allow HTTP traffic and install nginx on the virtual machine using the Run Command feature.
 
 # [Azure portal](#tab/azureportal)
 
-You connect to the virtual machine with SSH to test the IPv4 public IP address.
+### Create an inbound security rule
 
-1. In the search box at the top of the portal, enter **Public IP address**. Select **Public IP addresses** in the search results.
+1. In the search box at the top of the portal, enter **Network security group**. Select **Network security groups** in the search results.
+
+1. Select **myNSG**.
+
+1. Select **Inbound security rules** in **Settings**.
+
+1. Select **+ Add**.
+
+1. Enter or select the following information:
+
+    | Setting | Value |
+    | ------- | ----- |
+    | Source | Leave the default of **Any**. |
+    | Source port ranges | Leave the default of **\***. |
+    | Destination | Leave the default of **Any**. |
+    | Service | Select **HTTP**. |
+    | Action | Leave the default of **Allow**. |
+    | Priority | Enter **100**. |
+    | Name | Enter *myNSGRuleHTTP*. |
+
+1. Select **Add**.
+
+### Install nginx with Run Command
+
+1. In the search box at the top of the portal, enter **Virtual machine**. Select **Virtual machines** in the search results.
+
+1. Select **myVM**.
 
-2. Select **myPublicIP-IPv4**.
+1. In **Operations**, select **Run command**.
 
-3. The public IPv4 address is in the **Overview** in **IP address**. In this example it's, **20.22.46.19**.
+1. Select **RunShellScript**.
 
-4. Open an SSH connection to the virtual machine by using the following command. Replace the IP address with the IP address of your virtual machine. Replace **`azureuser`** with the username you chose during virtual machine creation. The **`-i`** is the path to the private key that you downloaded earlier. In this example, it's **~/.ssh/mySSHKey.pem**.
+1. Enter the following commands:
 
     ```bash
-    ssh -i ~/.ssh/mySSHkey.pem [email protected]
+    sudo apt-get update
+    sudo apt-get install -y nginx
     ```
+
+1. Select **Run**.
+
+1. Wait for the command to complete. The output pane displays **Enable succeeded** when complete.
+
 # [Azure CLI](#tab/azurecli/)
 
-Use [az network public-ip show](/cli/azure/network/public-ip#az-network-public-ip-show) to display the IP addresses of the virtual machine.
+### Create an inbound security rule
+
+Use [az network nsg rule create](/cli/azure/network/nsg/rule#az-network-nsg-rule-create) to create a network security group rule to allow HTTP traffic.
 
 ```azurecli-interactive
-  az network public-ip show \
+  az network nsg rule create \
     --resource-group myResourceGroup \
-    --name myPublicIP-IPv4 \
-    --query ipAddress \
-    --output tsv
+    --nsg-name myNSG \
+    --name myNSGRuleHTTP \
+    --protocol '*' \
+    --direction inbound \
+    --source-address-prefix '*' \
+    --source-port-range '*' \
+    --destination-address-prefix '*' \
+    --destination-port-range 80 \
+    --access allow \
+    --priority 100
 ```
 
+### Install nginx
+
+Use [az vm run-command invoke](/cli/azure/vm/run-command#az-vm-run-command-invoke) to install nginx on the virtual machine.
+
 ```azurecli-interactive
-user@Azure:~$ az network public-ip show \
->     --resource-group myResourceGroup \
->     --name myPublicIP-IPv4 \
->     --query ipAddress \
->     --output tsv
-20.119.201.208
+  az vm run-command invoke \
+    --resource-group myResourceGroup \
+    --name myVM \
+    --command-id RunShellScript \
+    --scripts "sudo apt-get update && sudo apt-get install -y nginx"
 ```
 
+# [Azure PowerShell](#tab/azurepowershell/)
+
+### Create an inbound security rule
+
+Use [Get-AzNetworkSecurityGroup](/powershell/module/az.network/get-aznetworksecuritygroup) and [Add-AzNetworkSecurityRuleConfig](/powershell/module/az.network/add-aznetworksecurityruleconfig) to create a network security group rule to allow HTTP traffic.
+
+```azurepowershell-interactive
+## Place the network security group into a variable. ##
+$nsg = @{
+    Name = 'myNSG'
+    ResourceGroupName = 'myResourceGroup'
+}
+$nsgObj = Get-AzNetworkSecurityGroup @nsg
+
+## Create the network security group rule. ##
+$nsgRule = @{
+    Name = 'myNSGRuleHTTP'
+    Protocol = '*'
+    Direction = 'Inbound'
+    Priority = 100
+    SourceAddressPrefix = '*'
+    SourcePortRange = '*'
+    DestinationAddressPrefix = '*'
+    DestinationPortRange = 80
+    Access = 'Allow'
+}
+$nsgObj | Add-AzNetworkSecurityRuleConfig @nsgRule | Set-AzNetworkSecurityGroup
+```
+
+### Install nginx
+
+Use [Invoke-AzVMRunCommand](/powershell/module/az.compute/invoke-azvmruncommand) to install nginx on the virtual machine.
+
+```azurepowershell-interactive
+$vm = @{
+    ResourceGroupName = 'myResourceGroup'
+    Name = 'myVM'
+    CommandId = 'RunShellScript'
+    ScriptString = 'sudo apt-get update && sudo apt-get install -y nginx'
+}
+Invoke-AzVMRunCommand @vm
+```
+
+---
+
+## Test dual-stack connectivity
+
+Verify nginx is running by connecting to the public IPv4 address of the virtual machine.
+
+# [Azure portal](#tab/azureportal)
+
+1. In the search box at the top of the portal, enter **Public IP address**. Select **Public IP addresses** in the search results.
+
+1. Select **myPublicIP-IPv4**.
+
+1. Note the public IPv4 address in the **Overview** under **IP address**. In this example, it's **20.22.46.19**.
+
+1. Open your web browser and browse to `http://20.22.46.19`. Replace the IP address with the public IPv4 address of your virtual machine.
+
+1. The default nginx welcome page is displayed, confirming that the web server is running and accessible over IPv4.
+
+# [Azure CLI](#tab/azurecli/)
+
+Use [az network public-ip show](/cli/azure/network/public-ip#az-network-public-ip-show) to display the IP addresses of the virtual machine.
+
 ```azurecli-interactive
   az network public-ip show \
     --resource-group myResourceGroup \
-    --name myPublicIP-IPv6 \
+    --name myPublicIP-IPv4 \
     --query ipAddress \
     --output tsv
 ```
 
-```azurecli-interactive
-user@Azure:~$ az network public-ip show \
->     --resource-group myResourceGroup \
->     --name myPublicIP-IPv6 \
->     --query ipAddress \
->     --output tsv
-2603:1030:408:6::9d
-```
+Open your web browser and browse to the IPv4 address displayed. The default nginx welcome page confirms that the web server is running and accessible.
 
-Open an SSH connection to the virtual machine by using the following command. Replace the IP address with the IP address of your virtual machine.
+Use the following command to display the IPv6 address:
 
 ```azurecli-interactive
-  ssh [email protected]
+  az network public-ip show \
+    --resource-group myResourceGroup \
+    --name myPublicIP-IPv6 \
+    --query ipAddress \
+    --output tsv
 ```
 
 # [Azure PowerShell](#tab/azurepowershell/)
@@ -621,13 +747,9 @@ $ip4 = @{
 Get-AzPublicIPAddress @ip4 | select IpAddress
 ```
 
-```azurepowershell-interactive
-PS /home/user> Get-AzPublicIPAddress @ip4 | select IpAddress
+Open your web browser and browse to the IPv4 address displayed. The default nginx welcome page confirms that the web server is running and accessible.
 
-IpAddress
----------
-20.72.115.187
-```
+Use the following command to display the IPv6 address:
 
 ```azurepowershell-interactive
 $ip6 = @{
@@ -637,20 +759,6 @@ $ip6 = @{
 Get-AzPublicIPAddress @ip6 | select IpAddress
 ```
 
-```azurepowershell-interactive
-PS /home/user> Get-AzPublicIPAddress @ip6 | select IpAddress
-
-IpAddress
----------
-2603:1030:403:3::1ca
-```
-
-Open an SSH connection to the virtual machine by using the following command. Replace the IP address with the IP address of your virtual machine.
-
-```azurepowershell-interactive
-ssh [email protected]
-```
-
 ---
 
 ## Clean up resources