Deploying ARM template for Azure

[stan1]

Hi All,

Anyone encountered issue while deploying arm template from this link: "https://github.com/PaloAltoNetworks/Azure-interface-options"? i cannot seems to add it to my existing resource group using all the options. The error i have is as below.

[jmeurer]

Watch for a type-o in either your VNET name or the subnet named "Mgmt" especially a trailing space in the template which I have seen often when copying and pasting from the portal.  That error is indicating that the VNIC cannot be added to subnet Mgmt.  The templates assume the subnets designated already exist, they will not create them in the RG.

[stan1]

Its a fresh new deployment of firewall to existing RG without any existing firewall. I suspect there is issue with the Github template.

[kblackstone]

Which of the templates did you use?

[stan1]

Both of the below links:

1. https://github.com/kblackstone/PaloAltoNetworks

2. https://github.com/PaloAltoNetworks/Azure-interface-options

[kblackstone]

Which one specifically? There are multiple ARM templates in those directories.

[stan1]

I tried both existing environment with and without New AVSET. Same result.

[jmeurer]

Could you please post a picture of your subnets under Settings in the VNET.  The Mgmt, Trust and Untrust subnet names in the template are the default example and need to be changed to match the subnets you have previously created in the VNET.  Same will apply to the subnet prefix and Start Address.

[stan1]

There are no Mgmt, Untrust and Trust subnets in my existing RG. There is only web subnet in the vnet.

[jmeurer · Accepted solution]

The subnets are prerequisits.  The template does not create them.   Each of the templates notes in the initial section what needs to already exist such as the Resource Group, VNET - with subnets, Storage Account for the VHDs, Load Balancer and AVailability Set.  

[stan1]

Noted. I wasn't aware that the pre-requsite subnets expect me to create the firewall subnets beforehand. Thanks for tinkle!

[Dnyanesh]

I wish I could read your comment before deploying the Github template. I would have 
saved the one day.;) Thanks.

---

@jmeurer wrote:

The subnets are prerequisits.  The template does not create them.   Each of the templates notes in the initial section what needs to already exist such as the Resource Group, VNET - with subnets, Storage Account for the VHDs, Load Balancer and AVailability Set.  

---