Lab: Route traffic to the Firewall
Scenario
Now that a firewall is in place with policies that enforce your organizations security requirements, you need to route your network traffic to the firewall subnet so it can filter and inspect the traffic. Route tables provide control over the routing of network traffic to and from the web application. Network Traffic is subject to the firewall rules when you route your network traffic to the firewall as the subnet default gateway.
Architecture diagram
Skilling tasks
- Create and configure a route table.
- Link a route table to a subnet.
Exercise instructions
Create a route table
-
Record the private and public IP address of app-vnet-firewall.
-
In the search box at the top of the portal, enter Firewall. Select Firewall in the search results.
-
Select app-vnet-firewall.
-
Select Overview.
- Record the Private IP address.
-
In the Overview pane select on fwpip
-
Record the Public IP address.
-
-
In the search box, enter Route tables. When Route table appears in the search results, select it.
-
In the Route table page, select + Create.
-
On the Basics tab of Create Route table, enter the information as listed in the table below:
Property Value Subscription Select your subscription Resource group RG1 Region East US Name app-vnet-firewall-rt -
Select Review + create and then select Create.
Learn more on creating route tables and associating a route table to a subnet.
Associate the route table to the subnets
-
In the search box, enter Route tables. and select Route Tables from the search results.
-
Select app-vnet-firewall-rt.
-
Select Subnets.
-
Select + Associate.
-
On the Associate subnet page, enter the information as listed in the table below:
Property Value Virtual network app-vnet (RG1) Subnet frontend -
Select OK.
-
Repeat the steps above to associate the app-vnet-firewall-rt route table to the backend subnet in app-vnet.
Create a route in the route table
-
In the search box, enter Route tables. and select Route Tables from the search results.
-
Select app-vnet-firewall-rt.
-
Select Routes.
-
Select + Add.
-
On the Add route page, enter the information as listed in the table below:
Property Value Route name outbound-firewall Destination type IP addresses Destination IP addresses/CIDR range 0.0.0.0/0 Next hop type Virtual appliance Next hop address private IP address of the firewall recorded earlier -
Select Add.
Learn more on creating routes.
Now the outbound traffic from the front end and backend subnet will route to the firewall.