Create public IP addresses on multi-rack deployments of Azure Local (preview)

Applies to: Multi-rack deployments of Azure Local 2511 and later

This article describes how to create public IP resources on multi-rack deployments of Azure Local.

A public IP in a multi-rack deployment of Azure Local represents an externally routable IP address resource.

Unlike Azure public IP addresses, which are always internet-routable, a public IP on multi-rack deployments can be configured with any IP address that's routable within your network or, optionally, internet-facing. This resource can be attached to software defined networking (SDN) services, such as NAT Gateways and Software Load Balancers (SLB), to expose them to external networks (on-premises or the internet).

Key characteristics of public IPs on multi-rack deployments

• Only IPv4: Public IP address resources can only be IPv4 today. IPv6 addresses aren't supported on multirack deployments.
• Static allocation only: Public IP addresses are statically allocated from a user-created logical network with routable IP address space assigned. Dynamic allocation of IP addresses isn't supported. Effectively, the public IP resource is assigned an IP address at the time it’s created and it stays the same throughout the life of the resource.
• Supported resources: Public IP address resources can only be assigned to NAT Gateways and SLBs. They can't be associated with a virtual machine (VM) network interface.

Prerequisites

Before you begin, complete these prerequisites:

• Review and complete the prerequisites. If you're using a client to connect to your Azure Local, see Connect to the system remotely.

• Access to an Azure subscription with the appropriate RBAC role and permissions assigned.

• Access to a resource group where you want to provision the public IP address.

• Access to the ARM ID of the custom location associated with your Azure Local instance where you want to provision the public IP resource.

• Access to the ARM ID of the logical network from which the public IP resource would be allocated its IP address.

Create a public IP resource

You can create a public IP resource using the Azure Command-Line Interface (CLI).

Sign in and set subscription

1. Connect to your Azure Local instance.

2. Sign in and type:

   az login --use-device-code 
   

3. Set your subscription:

   az account set --subscription "<Subscription ID>"
   

Create the public IP address

Use the az stack-hci-vm network public-ip create command to create a public IP address on your multi-rack deployment.

1. Set the parameters. Here's an example:

   $subscription = "<Subscription ID>"
   $location = "eastus"
   $resourceGroup = "mylocal-rg"
   $customLocationID = "<custom location ARM resource ID>"
   $name = "mylocal-publicip"
   $allocationScope = "/subscriptions/$subscription/resourceGroups/$resourceGroup/providers/Microsoft.AzureStackHCI/logicalnetworks/mylocal-lnet-static"
   $ip = "20.30.40.50"
   

   The required parameters are tabulated as follows:

   Parameters	Description
   name	Name for the public IP resource that you create. Make sure to provide a name that follows the Naming rules for Azure network resources.. You can't rename a public IP resource after it's created.
   resource-group	Name of the resource group where you create the public IP resource.
   subscription	Name or ID of the subscription you want to use to create your public IP resource.
   custom-location	ARM ID of the custom location associated with your Azure Local where you're creating this public IP resource.
   location	Azure regions as specified by az locations.
   allocation-scope	ARM ID of the LogicalNetwork resource from which the public IP should be allocated.
   ip	If you want to specify a particular static IP address, this optional field can be used. If omitted, the system will pick an IP from the IP pool associated with the logical network.

2. Create a public IP. Run the following command:

   az stack-hci-vm network public-ip create --resource-group $resourceGroup --name $name --location $location --version IPv4 --allocation-scope $allocationScope --ip-address $ip --custom-location $customLocationID
   

   Once the public IP is created, you can associate it with a NAT Gateway or an SLB.

Next steps

• Create a load balancer on a logical network
• About NAT gateways for multi-rack deployments