Create an enclave connection from the Azure portal

By using enclave connections, you can enable network traffic to flow between Azure Enclave communities, enclaves, and transit hubs. In this how-to guide, you create an enclave connection in the Azure portal.

Prerequisites

• An Azure subscription. If needed, create a free Azure account.
• A community and an enclave.
• For an enclave source, an existing enclave endpoint or community endpoint in the same community.
• For a transit hub source, an existing transit hub and an enclave endpoint in the same community.

Sign in to Azure

Sign in to the Azure portal.

Create an enclave connection

1. Enter Azure Enclave in the search.

2. Under Services, select Azure Enclave.

3. In the Azure Enclave page, select Enclaves in the left menu.

4. On the Enclaves page, select your Enclave's name to open the enclave resource.

5. Select Enclave Connections on the left navigation and then select Create.

6. Enter the following information:

   • Enclave connection name: Enter a name for the enclave connection.
   • Community: Select the existing community from the list.

Choose the source type for the connection and follow the corresponding steps:

• If the source is an enclave, follow the steps in Configure an enclave source connection.
• If the source is a transit hub, follow the steps in Configure a transit hub source connection.

Configure an enclave source connection

If the connection source is Transit Hub, skip this section.

For connections where the source is Enclave, enter the required information:

1. Under Source Type, select Enclave.

2. Select the existing Source Enclave from the list.

3. Enter the Source IP addresses/CIDR range(s) for the enclave subnets that initiate traffic.

4. Under Destination Endpoint Type, select Enclave Endpoint or Community Endpoint.

5. Select the Destination Endpoint from the list.

   

Configure a transit hub source connection

If the connection source is Enclave, skip this section.

For connections where the source is Transit Hub, enter the required information:

1. Under Source Type, select Transit Hub.

2. Select the Source Transit Hub from the list.

3. Enter the Source IP addresses/CIDR range(s) for this connection.

4. Select an existing Enclave Endpoint from the list. If the transit hub is secured by Azure Firewall, you can select an Enclave Endpoint or Community Endpoint.

   

5. Select Review + create, and then select Create.