topic Re: Azure VM Series and mgmt-interface-swap in VM-Series in the Public Cloud

Azure VM Series and mgmt-interface-swap

gduncan — Thu, 01 Dec 2016 22:56:58 GMT

Is there a native capability with the VM Series CLI to execute the mgmt-interface-swap command? I would like to attach an Azure Load Balancer to the UNTRUST interface on eth0 so that I can force all internet facing application traffic through the VM Series firewall in my Azure vNET.

Re: Azure VM Series and mgmt-interface-swap

jbaker — Thu, 01 Dec 2016 23:07:09 GMT

This capability is coming soon when Microsoft support multiple public IP's.

@gduncan wrote:
Is there a native capability with the VM Series CLI to execute the mgmt-interface-swap command? I would like to attach an Azure Load Balancer to the UNTRUST interface on eth0 so that I can force all internet facing application traffic through the VM Series firewall in my Azure vNET.

Re: Azure VM Series and mgmt-interface-swap

gduncan — Thu, 01 Dec 2016 23:47:29 GMT

Thank you for your response. Outside associating a second public IP to UNTRUST on eth1 with that support from MS, what is the current use case for deploying VM Series in Azure for securing internet facing application traffic? In my case, I would like MGMT to only be private and UNTRUST to be public. It appears Palo Alto solved this already for AWS and using an ELB with the mgmt-interface-swap CLI command.

Re: Azure VM Series and mgmt-interface-swap

jbaker — Fri, 02 Dec 2016 00:02:11 GMT

You are spot on with your thinking. By the way, I am not certain who you are. I know you are gduncan but I am having trouble connecting the dots. Let me check on the Azure managment interface swap for you.

Jeff

Re: Azure VM Series and mgmt-interface-swap

gduncan — Fri, 02 Dec 2016 15:35:45 GMT

Thank you Jeff, appreciate your input. I don't think we've met. I'm Geoff Duncan, Sr. Solutions Architect with Digital Fortress in Seattle. We focus on hybrid technology solutions and services for our clients as well as operate redundant datacenters in the Seattle metro area.