New-AzVpnConnection

Modul:

Az.Network

Membuat koneksi IPSec yang menghubungkan VpnGateway ke cabang pelanggan jarak jauh yang diwakili dalam RM sebagai VpnSite.

Sintaks

New-AzVpnConnection
   -ResourceGroupName <String>
   -ParentResourceName <String>
   -Name <String>
   -VpnSite <PSVpnSite>
   [-SharedKey <SecureString>]
   [-ConnectionBandwidthInMbps <UInt32>]
   [-IpSecPolicy <PSIpsecPolicy>]
   [-VpnConnectionProtocolType <String>]
   [-EnableBgp]
   [-UseLocalAzureIpAddress]
   [-UsePolicyBasedTrafficSelectors]
   [-VpnSiteLinkConnection <PSVpnSiteLinkConnection[]>]
   [-EnableInternetSecurity]
   [-RoutingConfiguration <PSRoutingConfiguration>]
   [-TrafficSelectorPolicy <PSTrafficSelectorPolicy[]>]
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-AzVpnConnection
   -ResourceGroupName <String>
   -ParentResourceName <String>
   -Name <String>
   -VpnSiteId <String>
   [-SharedKey <SecureString>]
   [-ConnectionBandwidthInMbps <UInt32>]
   [-IpSecPolicy <PSIpsecPolicy>]
   [-VpnConnectionProtocolType <String>]
   [-EnableBgp]
   [-UseLocalAzureIpAddress]
   [-UsePolicyBasedTrafficSelectors]
   [-VpnSiteLinkConnection <PSVpnSiteLinkConnection[]>]
   [-EnableInternetSecurity]
   [-RoutingConfiguration <PSRoutingConfiguration>]
   [-TrafficSelectorPolicy <PSTrafficSelectorPolicy[]>]
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-AzVpnConnection
   -ParentObject <PSVpnGateway>
   -Name <String>
   -VpnSite <PSVpnSite>
   [-SharedKey <SecureString>]
   [-ConnectionBandwidthInMbps <UInt32>]
   [-IpSecPolicy <PSIpsecPolicy>]
   [-VpnConnectionProtocolType <String>]
   [-EnableBgp]
   [-UseLocalAzureIpAddress]
   [-UsePolicyBasedTrafficSelectors]
   [-VpnSiteLinkConnection <PSVpnSiteLinkConnection[]>]
   [-EnableInternetSecurity]
   [-RoutingConfiguration <PSRoutingConfiguration>]
   [-TrafficSelectorPolicy <PSTrafficSelectorPolicy[]>]
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-AzVpnConnection
   -ParentObject <PSVpnGateway>
   -Name <String>
   -VpnSiteId <String>
   [-SharedKey <SecureString>]
   [-ConnectionBandwidthInMbps <UInt32>]
   [-IpSecPolicy <PSIpsecPolicy>]
   [-VpnConnectionProtocolType <String>]
   [-EnableBgp]
   [-UseLocalAzureIpAddress]
   [-UsePolicyBasedTrafficSelectors]
   [-VpnSiteLinkConnection <PSVpnSiteLinkConnection[]>]
   [-EnableInternetSecurity]
   [-RoutingConfiguration <PSRoutingConfiguration>]
   [-TrafficSelectorPolicy <PSTrafficSelectorPolicy[]>]
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-AzVpnConnection
   -ParentResourceId <String>
   -Name <String>
   -VpnSite <PSVpnSite>
   [-SharedKey <SecureString>]
   [-ConnectionBandwidthInMbps <UInt32>]
   [-IpSecPolicy <PSIpsecPolicy>]
   [-VpnConnectionProtocolType <String>]
   [-EnableBgp]
   [-UseLocalAzureIpAddress]
   [-UsePolicyBasedTrafficSelectors]
   [-VpnSiteLinkConnection <PSVpnSiteLinkConnection[]>]
   [-EnableInternetSecurity]
   [-RoutingConfiguration <PSRoutingConfiguration>]
   [-TrafficSelectorPolicy <PSTrafficSelectorPolicy[]>]
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-AzVpnConnection
   -ParentResourceId <String>
   -Name <String>
   -VpnSiteId <String>
   [-SharedKey <SecureString>]
   [-ConnectionBandwidthInMbps <UInt32>]
   [-IpSecPolicy <PSIpsecPolicy>]
   [-VpnConnectionProtocolType <String>]
   [-EnableBgp]
   [-UseLocalAzureIpAddress]
   [-UsePolicyBasedTrafficSelectors]
   [-VpnSiteLinkConnection <PSVpnSiteLinkConnection[]>]
   [-EnableInternetSecurity]
   [-RoutingConfiguration <PSRoutingConfiguration>]
   [-TrafficSelectorPolicy <PSTrafficSelectorPolicy[]>]
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Deskripsi

Membuat koneksi IPSec yang menghubungkan VpnGateway ke cabang pelanggan jarak jauh yang diwakili dalam RM sebagai VpnSite.

Contoh

Contoh 1

New-AzResourceGroup -Location "West US" -Name "testRG"
$virtualWan = New-AzVirtualWan -ResourceGroupName testRG -Name myVirtualWAN -Location "West US"
$virtualHub = New-AzVirtualHub -VirtualWan $virtualWan -ResourceGroupName "testRG" -Name "westushub" -AddressPrefix "10.0.0.1/24"
New-AzVpnGateway -ResourceGroupName "testRG" -Name "testvpngw" -VirtualHubId $virtualHub.Id -VpnGatewayScaleUnit 2
$vpnGateway = Get-AzVpnGateway -ResourceGroupName "testRG" -Name "testvpngw"
$vpnSiteAddressSpaces = New-Object string[] 2
$vpnSiteAddressSpaces[0] = "192.168.2.0/24"
$vpnSiteAddressSpaces[1] = "192.168.3.0/24"
$vpnSite = New-AzVpnSite -ResourceGroupName "testRG" -Name "testVpnSite" -Location "West US" -VirtualWan $virtualWan -IpAddress "1.2.3.4" -AddressSpace $vpnSiteAddressSpaces -DeviceModel "SomeDevice" -DeviceVendor "SomeDeviceVendor" -LinkSpeedInMbps "10"

New-AzVpnConnection -ResourceGroupName $vpnGateway.ResourceGroupName -ParentResourceName $vpnGateway.Name -Name "testConnection" -VpnSite $vpnSite -ConnectionBandwidthInMbps 20

RemoteVpnSite             : Microsoft.Azure.Commands.Network.Models.PSResourceId
SharedKey                 :
VpnConnectionProtocolType : IKEv2
ConnectionStatus          :
EgressBytesTransferred    : 0
IngressBytesTransferred   : 0
IpsecPolicies             : {}
ConnectionBandwidth       : 20
EnableBgp                 : False
UseLocalAzureIpAddress    : False
ProvisioningState         : testConnection
Name                      : ps9709
Etag                      : W/"4580a2e2-2fab-4cff-88eb-92013a76b5a8"
Id                        : /subscriptions/{subscriptionId}/resourceGroups/testRg/providers/Microsoft.Network/vpnGateways/testvpngw/vpnConnections/testConnection
RoutingConfiguration      : {
                                "AssociatedRouteTable": {
                                    "Id": "/subscriptions/{subscriptionId}/resourceGroups/testRg/providers/Microsoft.Network/virtualHubs/westushub/hubRouteTables/defaultRouteTable"
                                }
                                "PropagatedRouteTables": {
                                    "Labels": [],
                                    "Ids": [
                                    {
                                    "Id": "/subscriptions/{subscriptionId}/resourceGroups/testRg/providers/Microsoft.Network/virtualHubs/westushub/hubRouteTables/defaultRouteTable"
                                    }
                                ]
                                },
                                "VnetRoutes": {
                                    "StaticRoutes": []
                                }
                            }

Di atas akan membuat grup sumber daya, Virtual WAN, Virtual Network, Virtual Hub, dan VpnSite di AS Barat dalam grup sumber daya "testRG" di Azure. Gateway VPN akan dibuat setelahnya di Hub Virtual dengan 2 unit skala.

Setelah gateway dibuat, gateway terhubung ke VpnSite menggunakan perintah New-AzVpn Koneksi ion.

Contoh 2

New-AzResourceGroup -Location "West US" -Name "testRG"
$virtualWan = New-AzVirtualWan -ResourceGroupName testRG -Name myVirtualWAN -Location "West US"
$virtualHub = New-AzVirtualHub -VirtualWan $virtualWan -ResourceGroupName "testRG" -Name "westushub" -AddressPrefix "10.0.0.1/24"
New-AzVpnGateway -ResourceGroupName "testRG" -Name "testvpngw" -VirtualHubId $virtualHub.Id -VpnGatewayScaleUnit 2
$vpnGateway = Get-AzVpnGateway -ResourceGroupName "testRG" -Name "testvpngw"

$vpnSiteAddressSpaces = New-Object string[] 2
$vpnSiteAddressSpaces[0] = "192.168.2.0/24"
$vpnSiteAddressSpaces[1] = "192.168.3.0/24"

$vpnSiteLink1 = New-AzVpnSiteLink -Name "testVpnSiteLink1" -IpAddress "15.25.35.45" -LinkProviderName "SomeTelecomProvider" -LinkSpeedInMbps "10"
$vpnSiteLink2 = New-AzVpnSiteLink -Name "testVpnSiteLink2" -IpAddress "15.25.35.55" -LinkProviderName "SomeTelecomProvider2" -LinkSpeedInMbps "100"
$vpnSite = New-AzVpnSite -ResourceGroupName "testRG" -Name "testVpnSite" -Location "West US" -VirtualWan $virtualWan -AddressSpace $vpnSiteAddressSpaces -DeviceModel "SomeDevice" -DeviceVendor "SomeDeviceVendor" -VpnSiteLink @($vpnSiteLink1, $vpnSiteLink2)


$vpnSiteLinkConnection1 = New-AzVpnSiteLinkConnection -Name "testLinkConnection1" -VpnSiteLink $vpnSite.VpnSiteLinks[0] -ConnectionBandwidth 100
$vpnSiteLinkConnection2 = New-AzVpnSiteLinkConnection -Name "testLinkConnection2" -VpnSiteLink $vpnSite.VpnSiteLinks[1] -ConnectionBandwidth 10

New-AzVpnConnection -ResourceGroupName $vpnGateway.ResourceGroupName -ParentResourceName $vpnGateway.Name -Name "testConnection" -VpnSite $vpnSite -VpnSiteLinkConnection @($vpnSiteLinkConnection1, $vpnSiteLinkConnection2)

Hal di atas akan membuat grup sumber daya, Virtual WAN, Virtual Network, Virtual Hub, dan VpnSite dengan 1 VpnSiteLinks di US Barat dalam grup sumber daya "testRG" di Azure. Gateway VPN akan dibuat setelahnya di Hub Virtual. Setelah gateway dibuat, gateway terhubung ke VpnSite menggunakan perintah New-AzVpn Koneksi ion dengan 1 VpnSiteLink Koneksi ions ke VpnSiteLink dari VpnSite.

Parameter

-AsJob

Jalankan cmdlet di latar belakang

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Confirm

Meminta Anda mengonfirmasi sebelum menjalankan cmdlet.

Type:	SwitchParameter
Aliases:	cf
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ConnectionBandwidthInMbps

Bandwidth yang perlu ditangani oleh koneksi ini dalam mbps.

Type:	UInt32
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DefaultProfile

Kredensial, akun, penyewa, dan langganan yang digunakan untuk komunikasi dengan Azure.

Type:	IAzureContextContainer
Aliases:	AzContext, AzureRmContext, AzureCredential
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-EnableBgp

Aktifkan BGP untuk koneksi ini

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-EnableInternetSecurity

Aktifkan keamanan internet untuk koneksi ini

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-IpSecPolicy

Bandwidth yang perlu ditangani oleh koneksi ini dalam mbps.

Type:	PSIpsecPolicy
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Name

Nama sumber daya.

Type:	String
Aliases:	ResourceName, VpnConnectionName
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-ParentObject

VpnGateway induk untuk koneksi ini.

Type:	PSVpnGateway
Aliases:	ParentVpnGateway, VpnGateway
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-ParentResourceId

Id sumber daya vpnGateway induk untuk koneksi ini.

Type:	String
Aliases:	ParentVpnGatewayId, VpnGatewayId
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-ParentResourceName

Nama grup sumber daya.

Type:	String
Aliases:	ParentVpnGatewayName, VpnGatewayName
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-ResourceGroupName

Nama grup sumber daya.

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-RoutingConfiguration

Konfigurasi perutean untuk koneksi ini

Type:	PSRoutingConfiguration
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-SharedKey

Kunci bersama diperlukan untuk menyetel koneksi ini.

Type:	SecureString
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-TrafficSelectorPolicy

Daftar kebijakan Pemilih Lalu Lintas.

Type:	PSTrafficSelectorPolicy[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	True
Accept wildcard characters:	False

-UseLocalAzureIpAddress

Gunakan alamat ip azure lokal sebagai alamat sumber saat memulai koneksi.

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-UsePolicyBasedTrafficSelectors

Gunakan pemilih lalu lintas berbasis kebijakan untuk koneksi ini.

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-VpnConnectionProtocolType

Protokol koneksi gateway:IKEv1/IKEv2

Type:	String
Accepted values:	IKEv1, IKEv2
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-VpnSite

Situs vpn jarak jauh tempat koneksi jaringan virtual hub ini tersambung.

Type:	PSVpnSite
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-VpnSiteId

Situs vpn jarak jauh tempat koneksi jaringan virtual hub ini tersambung.

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-VpnSiteLinkConnection

Daftar VpnSiteLink Koneksi ions yang dimiliki Vpn Koneksi ion ini.

Type:	PSVpnSiteLinkConnection[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-WhatIf

Menunjukkan apa yang akan terjadi jika cmdlet berjalan. Cmdlet tidak dijalankan.

Type:	SwitchParameter
Aliases:	wi
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

Input

PSVpnGateway

String

Output

PSVpnConnection

Link Terkait

• Get-AzVpn Koneksi ion
• Remove-AzVpn Koneksi ion
• Update-AzVpn Koneksi ion
• New-AzRoutingConfiguration