Azure VM Series and mgmt-interface-swap

[gduncan]

Is there a native capability with the VM Series CLI to execute the mgmt-interface-swap command?  I would like to attach an Azure Load Balancer to the UNTRUST interface on eth0 so that I can force all internet facing application traffic through the VM Series firewall in my Azure vNET.

[jbaker]

This capability is coming soon when Microsoft support multiple public IP's.

---

@gduncan wrote:

Is there a native capability with the VM Series CLI to execute the mgmt-interface-swap command?  I would like to attach an Azure Load Balancer to the UNTRUST interface on eth0 so that I can force all internet facing application traffic through the VM Series firewall in my Azure vNET.

---

[gduncan]

Thank you for your response.  Outside associating a second public IP to UNTRUST on eth1 with that support from MS, what is the current use case for deploying VM Series in Azure for securing internet facing application traffic?  In my case, I would like MGMT to only be private and UNTRUST to be public.  It appears Palo Alto solved this already for AWS and using an ELB with the mgmt-interface-swap CLI command.

[jbaker]

You are spot on with your thinking.  By the way, I am not certain who you are.  I know you are gduncan but I am having trouble connecting the dots.  Let me check on the Azure managment interface swap for you.

Jeff

[gduncan]

Thank you Jeff, appreciate your input.  I don't think we've met.  I'm Geoff Duncan, Sr. Solutions Architect with Digital Fortress in Seattle.  We focus on hybrid technology solutions and services for our clients as well as operate redundant datacenters in the Seattle metro area.