topic Re: Deploying ARM template for Azure in VM-Series in the Public Cloud

Deploying ARM template for Azure

stan1 — Wed, 07 Feb 2018 10:08:34 GMT

Hi All,

Anyone encountered issue while deploying arm template from this link: "https://github.com/PaloAltoNetworks/Azure-interface-options"? i cannot seems to add it to my existing resource group using all the options. The error i have is as below.

Re: Deploying ARM template for Azure

jmeurer — Wed, 07 Feb 2018 13:40:42 GMT

Watch for a type-o in either your VNET name or the subnet named "Mgmt" especially a trailing space in the template which I have seen often when copying and pasting from the portal. That error is indicating that the VNIC cannot be added to subnet Mgmt. The templates assume the subnets designated already exist, they will not create them in the RG.

Re: Deploying ARM template for Azure

stan1 — Wed, 07 Feb 2018 14:42:28 GMT

Its a fresh new deployment of firewall to existing RG without any existing firewall. I suspect there is issue with the Github template.

Re: Deploying ARM template for Azure

kblackstone — Wed, 07 Feb 2018 14:49:15 GMT

Which of the templates did you use?

Re: Deploying ARM template for Azure

stan1 — Wed, 07 Feb 2018 14:51:30 GMT

Both of the below links:

1. https://github.com/kblackstone/PaloAltoNetworks

2. https://github.com/PaloAltoNetworks/Azure-interface-options

Re: Deploying ARM template for Azure

kblackstone — Wed, 07 Feb 2018 15:00:36 GMT

Which one specifically? There are multiple ARM templates in those directories.

Re: Deploying ARM template for Azure

stan1 — Wed, 07 Feb 2018 15:06:10 GMT

I tried both existing environment with and without New AVSET. Same result.

Re: Deploying ARM template for Azure

jmeurer — Wed, 07 Feb 2018 15:28:32 GMT

Could you please post a picture of your subnets under Settings in the VNET. The Mgmt, Trust and Untrust subnet names in the template are the default example and need to be changed to match the subnets you have previously created in the VNET. Same will apply to the subnet prefix and Start Address.

Re: Deploying ARM template for Azure

stan1 — Wed, 07 Feb 2018 15:34:52 GMT

There are no Mgmt, Untrust and Trust subnets in my existing RG. There is only web subnet in the vnet.

Re: Deploying ARM template for Azure

jmeurer — Wed, 07 Feb 2018 15:47:54 GMT

The subnets are prerequisits. The template does not create them. Each of the templates notes in the initial section what needs to already exist such as the Resource Group, VNET - with subnets, Storage Account for the VHDs, Load Balancer and AVailability Set.

Re: Deploying ARM template for Azure

stan1 — Wed, 07 Feb 2018 16:06:46 GMT

Noted. I wasn't aware that the pre-requsite subnets expect me to create the firewall subnets beforehand. Thanks for tinkle!

Re: Deploying ARM template for Azure

Dnyanesh — Tue, 29 May 2018 18:17:01 GMT

I wish I could read your comment before deploying the Github template. I would have
saved the one day.;) Thanks.

@jmeurer wrote:
The subnets are prerequisits. The template does not create them. Each of the templates notes in the initial section what needs to already exist such as the Resource Group, VNET - with subnets, Storage Account for the VHDs, Load Balancer and AVailability Set.