Forum Discussion

vigneshkrcegmailcom's avatar
vigneshkrcegmailcom
Brass Contributor
Nov 11, 2020
Solved

ARM Template To create Multiple NSG's associate with existing Subnet

Hi All,   I am trying to create Multiple NSG with multiple rules associate with subnets. Can anyone give me the Template file which is used as single Template file for Multiple NSG. Attached is th...
  • StefanIvemo's avatar
    StefanIvemo
    Nov 17, 2020

    vigneshkrcegmailcom 

    Hi!

     

    I've put together a template for you that solves your problem using copy loops for both the NSGs and the subnet association. You can find it here: https://gist.github.com/StefanIvemo/31cda6faa214824b2049a1e98f0e279b

     

    I've created a parameter called NSGs of the type array in the template. Take a look at the example parameter file and adjust it to your needs. All you have to do is add/remove objects to the array and fill in NSGName, SubnetName and your SecurityRules. 

     

    The template will first deploy all the NSGs and then do a nested deployment to do the subnet association.

     

    Good luck with your deployment!

     

StefanIvemo's avatar
StefanIvemo
Brass Contributor
Nov 19, 2020

vigneshkrcegmailcom 

You can continue with the template I provided. Just add a property for routes to the parameter file for each of the objects in the array, the same way as for securityRules. E.g. "routes": [], and add your custom routes to it.

 

Then create a copy loop to create Microsoft.Network/routeTables just like the one for NSGs but modify the properties to work with the Route Table resource.

 

In the nested deploy where the NSG is associated with the subnet you add the routeTable property.

 

Good luck!

 

     
vigneshkrcegmailcom's avatar
vigneshkrcegmailcom
Brass Contributor
Nov 19, 2020

StefanIvemo 

 

Hi,

 

Thanks for the quick update.....

 

I have modified as per your request but deployment is failing. Below is the Modified Template and Para files.

 

{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "location": {
            "type": "String"
        },
        "VNetName": {
            "type": "String",
            "metadata": {
                "description": "description"
            }
        },
        "RTs": {
            "type": "Array"
        }
    },
    "resources": [
        {
            "type": "Microsoft.Network/routeTables",
            "apiVersion": "2020-05-01",
            "name": "[concat(parameters('RTs')[copyIndex()].properties.RTName)]",
            "location": "[parameters('Location')]",
            "properties": {
                "Routes": "[parameters('RTs')[copyIndex()].properties.Routes]"
            },
            "copy": {
                "name": "RTs",
                "count": "[length(parameters('RTs'))]"
            }
        },
        {
            "type": "Microsoft.Resources/deployments",
            "apiVersion": "2020-06-01",
            "name": "[concat('apply',parameters('RTs')[copyIndex()].properties.RTName)]",
            "dependsOn": [
                "RTs"
            ],
            "properties": {
                "mode": "Incremental",
                "template": {
                    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
                    "contentVersion": "1.0.0.0",
                    "resources": [
                        {
                            "apiVersion": "2020-05-01",
                            "type": "Microsoft.Network/virtualNetworks/subnets",
                            "name": "[concat(parameters('VNetName'), '/', parameters('RTs')[copyIndex()].properties.SubnetName)]",
                            "location": "[resourceGroup().location]",
                            "properties": {
                                "addressPrefix": "[reference(resourceId(resourceGroup().name, 'Microsoft.Network/virtualNetworks/subnets', parameters('VNetName'), parameters('RTs')[copyIndex()].properties.SubnetName), '2018-03-01').addressPrefix]",
                                "networkSecurityGroup": {
                                    "id": "[resourceId('Microsoft.Network/routeTables', parameters('RTs')[copyIndex()].properties.RTName)]"
                                }
                            }
                        }
                    ]
                }
            },
            "copy": {
                "name": "association",
                "count": "[length(parameters('RTs'))]",
                "mode": "Serial"
            }
        }
    ]
}
 
======================================
 
{
    "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentParameters.json#",
    "contentVersion": "1.0.0.0",
    "parameters": {
        "location": {
            "value": "East US"
        },
        "VNetName": {
            "value": "VN02"
        },
        "RTs": {
            "value": [
                {
                    "properties": {
                        "RTName": "RT01",
                        "SubnetName": "sub01",
                        "securityRules": [
                            {
                            
                "addressPrefix": "10.1.0.0/16",
                "nextHopType": "VnetLocal"
            }
                        ]
                    }
                },
                {
                    "properties": {
                        "RTName": "RT02",
                        "SubnetName": "sub02",
                        "securityRules": [
                        {
                "addressPrefix": "10.2.0.0/16",
                "nextHopType": "VnetLocal"
            }
                        ]
                    }
                },
                {
                    "properties": {
                        "RTName": "RT03",
                        "SubnetName": "sub03",
                        "securityRules": [
                            {
                                "addressPrefix": "10.3.0.0/16",
                                "nextHopType": "VnetLocal"
                            }

                        ]
                    }
                }
            ]
        }
    }
}
 
 
  • StefanIvemo's avatar
    StefanIvemo
    Brass Contributor
    Nov 19, 2020

    vigneshkrcegmailcom 

     

    I've updated the NSG template provided earlier with route tables as well. You can find it here:

    https://gist.github.com/StefanIvemo/1862a1401fa982cc8f124a6148eda5f5

     

    You can now deploy NSGs and Route Tables at the same time and update the subnets.

     

    Hope it works for you!

    • vigneshkrcegmailcom's avatar
      vigneshkrcegmailcom
      Brass Contributor
      Dec 01, 2020

      StefanIvemo 

       

      Hi Stefan,

       

      This is working as expected, Is it possible to create Multiple Routes inside One Route Table using this Same template and para files.

      Can you please help me to create Multiple Routes inside route Table.

       

      https://gist.github.com/StefanIvemo/1862a1401fa982cc8f124a6148eda5f5

       

      I am trying to add two Routes inside one route table as below but i am not able to get it, Can you please help on this.

       

      "disableBgpRoutePropagation": true,
                  "routes": [
                    {
                      "name": "Route1",
                      "properties": {
                        "addressPrefix": "0.0.0.0/0",
                        "nextHopType": "VirtualAppliance",
                        "nextHopIpAddress": "10.0.0.4"
                      }
                    },
                    [
                      {
                        "name": "Route2",
                        "properties": {
                          "addressPrefix": "0.0.0.0/0",
                          "nextHopType": "VirtualAppliance",
                          "nextHopIpAddress": "10.0.0.5"
                        }
                      }
                    ]
                  ]

       

      Regards,

      Vignesh

      • StefanIvemo's avatar
        StefanIvemo
        Brass Contributor
        Dec 01, 2020

        vigneshkrcegmailcom 

         

        You can add additional routes by adding another route object in the routes array in the parameter file:

         

          "routes": [
            {
              "name": "route1",
              "properties": {
                "addressPrefix": "10.0.0.0/24",
                "nextHopType": "VirtualAppliance",
                "nextHopIpAddress": "10.0.0.4"
              }
            },
            {
              "name": "route2",
              "properties": {
                "addressPrefix": "10.10.0.0/24",
                "nextHopType": "VirtualAppliance",
                "nextHopIpAddress": "10.10.0.68"
              }
            }
          ]
         
        Your example is almost correct, you have some square brackets [] in the wrong place. 
         

Resources