azure-devops-ci-ansible-vpn-deployment/LocalNetGW-VPNConn.json at master · Better-Computing-Consulting/azure-devops-ci-ansible-vpn-deployment · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
    "LocalNetGWName": {
      "defaultValue": "ASALAB",
      "type": "String"
    },
    "gatewayIpAddress": {
      "type": "String"
    },
    "addressPrefixes": {
      "type": "String"
    },
    "asn": {
      "type": "int"
    },
    "bgpPeeringAddress": {
      "type": "String"
    },
    "VPNConnName": {
      "defaultValue": "AzureLabConn",
      "type": "String"
    },
    "VNetGW": {
      "type": "String"
    },
    "vpnSharedKey": {
      "type": "String"
    }
  },
  "variables": {},
  "resources": [
    {
      "type": "Microsoft.Network/localNetworkGateways",
      "apiVersion": "2019-09-01",
      "name": "[parameters('LocalNetGWName')]",
      "location": "[resourceGroup().location]",
      "properties": {
        "localNetworkAddressSpace": {
          "addressPrefixes": [
            "[parameters('addressPrefixes')]"
          ]
        },
        "gatewayIpAddress": "[parameters('gatewayIpAddress')]",
        "bgpSettings": {
          "asn": "[parameters('asn')]",
          "bgpPeeringAddress": "[parameters('bgpPeeringAddress')]",
          "peerWeight": 0
        }
      }
    },
    {
      "type": "Microsoft.Network/connections",
      "apiVersion": "2019-09-01",
      "name": "[parameters('VPNConnName')]",
      "location": "[resourceGroup().location]",
      "dependsOn": [
        "[resourceId('Microsoft.Network/localNetworkGateways', parameters('LocalNetGWName'))]"
      ],
      "properties": {
        "virtualNetworkGateway1": {
          "id": "[resourceId('Microsoft.Network/virtualNetworkGateways', parameters('VNetGW'))]"
        },
        "localNetworkGateway2": {
          "id": "[resourceId('Microsoft.Network/localNetworkGateways', parameters('LocalNetGWName'))]"
        },
        "connectionType": "IPsec",
        "connectionProtocol": "IKEv2",
        "routingWeight": 10,
        "sharedKey": "[parameters('vpnSharedKey')]",
        "enableBgp": true,
        "useLocalAzureIpAddress": false,
        "usePolicyBasedTrafficSelectors": false,
        "ipsecPolicies": [],
        "trafficSelectorPolicies": [],
        "expressRouteGatewayBypass": false,
        "dpdTimeoutSeconds": 0,
        "connectionMode": "Default"
      }
    }
  ]
}