Getting Started with Microsoft Azure at CSU Mike Willard Mike.Willard@colostate.edu 491-4651 Bill Becker William.Becker@colostate.edu 491-2552

What is Microsoft Azure? Azure is a cloud computing platform and infrastructure. Provides Platform as a Service (PaaS) and Infrastructure as a Service (Iaas). Virtual Machines Storage IIS sites, SQL DBs, etc. CSU has an agreement for Azure cloud services facilitated by ACNS Advantageous pricing Wavier on data egress traffic if cost does not exceed 15% of charges.

Azure Management Enterprise Portal and Account Portal: Organization management and billing Department Account Subscription – limits 20 cores Resource Group – at least one set per area Azure Resource Manager (ARM) vs. Classic Management Tools: Web Scripting Templates

First Look and Demo Azure Resource Manager Portal Virtual Machine Creation DHCP DNS service NIC settings No Console

Networking and Connectivity Non-VPN Connected Subscription Department retains full access Can *never* become VPN connected VPN Connected Subscription Restricted permissions Extension of an ACNS datacenter ACNS manages VNETs and network space ACNS manages Network Security Groups (firewall rules) Request Public IPs from ACNS. Server security scans, etc. Routing of Azure private IPs limited to data center, Pulse Secure and potentially other server networks as negotiated. Public/Private routing issue. Management over VPN – RDP, SSH, etc.

Billing Department provides account for billing Billing data collected and charged monthly Charges per Resource Group Use Tags to assign account numbers to resources Each subscription has ‘ACNS_Billing_RG’ All resources and RGs have ‘AccountNumber’ tag Scripts assign tag based on RG. Use ACNS_Billing_RG AccountNumber as default First group in college/division pays for VPN. Can divide cost with additional groups as needed

Azure and Active Directory Requires VPN Domain joined machines in Azure Can access COLOSTATE DCs via VPN Child domain DCs not accessible unless in data center Lose DNS, authentication if CSU link down Domain Controllers in Azure – Not yet Replication – Need to setup AD site. Each child domain in Azure needs DC Need to setup gateways between Azure subscriptions Azure AD – not the same as Active Directory

Availability General availability within a month Finalize billing Management details (VPN config, network assignment, etc.) Get started with one month free Azure subscription $200 credit One per unique email address Requires credit card https://azure.microsoft.com/en-us/offers/ms-azr-0044p/

Resources Azure management portal https://portal.azure.com Intro to Azure https://docs.microsoft.com/en-us/azure/fundamentals-introduction-to-azure Pricing Calculator https://azure.microsoft.com/en-us/pricing/calculator/ Azure Cloud Limits https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits Azure storage speed http://www.azurespeed.com/ Azure Documentation https://docs.microsoft.com/en-us/azure/index

Getting Started with Microsoft Azure at CSU Mike Willard Mike.Willard@colostate.edu 491-4651 Bill Becker William.Becker@colostate.edu 491-2552