Launch an Instance¶

Now launch an instance of TNSR:

Install azure-cli. Instructions can be found at https://docs.microsoft.com/en-us/cli/azure/install-azure-cli?view=azure-cli-latest
Login to your Azure account running:
```
$ az login
```

Configure the default location.

$ az configure --defaults location=centralus

Create a resource group to be used to store all TNSR related objects if it does not already exist.
```
$ az group create -n TNSR-Resource-Group
```

Create Virtual Network and Subnets.

$ az network vnet create \
    -n TNSR-VNet \
    -g TNSR-Resource-Group \
    --address-prefixes 10.5.0.0/16

$ az network vnet subnet create \
    -g TNSR-Resource-Group \
    --vnet-name TNSR-VNet \
    -n TNSR-WAN-Subnet \
    --address-prefixes 10.5.0.0/24

$ az network vnet subnet create \
    -g TNSR-Resource-Group \
    --vnet-name TNSR-VNet \
    -n TNSR-LAN-Subnet \
    --address-prefixes 10.5.1.0/24

$ az network vnet subnet create \
    -g TNSR-Resource-Group \
    --vnet-name TNSR-VNet \
    -n TNSR-MGMT-Subnet \
    --address-prefixes 10.5.2.0/24

Create Public IPs to be used by WAN and Management interfaces.

$ az network public-ip create \
    -g TNSR-Resource-Group \
    -n TNSR-WAN-IP

$ az network public-ip create \
    -g TNSR-Resource-Group \
    -n TNSR-MGMT-IP

Create a Network Security Group (NSG).

$ az network nsg create -n TNSR-MGMT-NSG -g TNSR-Resource-Group
$ az network nsg rule create \
    --name MGMT_Allow_SSH \
    --nsg-name TNSR-MGMT-NSG \
    -g TNSR-Resource-Group \
    --priority 100 \
    --access Allow \
    --destination-port-ranges 22 \
    --direction Inbound \
    --protocol Tcp

Create the Management Network Interface.

$ az network nic create \
    -g TNSR-Resource-Group \
    --vnet-name TNSR-VNet \
    --subnet TNSR-MGMT-Subnet \
    -n TNSR-MGMT-nic \
    --public-ip-address TNSR-MGMT-IP \
    --network-security-group TNSR-MGMT-NSG

Create the WAN Network Interface.

$ az network nic create \
    -g TNSR-Resource-Group \
    --vnet-name TNSR-VNet \
    --subnet TNSR-WAN-Subnet \
    -n TNSR-WAN-nic \
    --public-ip-address TNSR-WAN-IP \
    --ip-forward \
    --accelerated-network

Create the LAN Network Interface.

$ az network nic create \
    -g TNSR-Resource-Group \
    --vnet-name TNSR-VNet \
    --subnet TNSR-LAN-Subnet \
    -n TNSR-LAN-nic \
    --ip-forward \
    --accelerated-network

Choose the VM Size to be used. To get a list of sizes that are able to run TNSR, run the following command and export a variable called TNSR_SIZE with it.

$ az vm list-sizes \
    --query "[?numberOfCores >= \`4\`] | [?memoryInMb >= \`8192\`].name | sort(@)" \
    --output tsv

$ export TNSR_SIZE=<FILL DESIRED SIZE HERE>

# EXAMPLE:
$ export TNSR_SIZE="Standard_DS4_v2"

Choose the TNSR image URN to be used from the list obtained with the following command and export a variable called TNSR_URN with it.

$ az vm image list \
    --publisher Netgate \
    --all \
    --query "[?contains(offer,'tnsr')].{Sku:sku, Version:version Urn:urn}" \
    --output table

$ export TNSR_URN="netgate:netgate-tnsr-azure-fw-vpn-router:netgate-tnsr:20.02.2"

Export a variable called TNSR_SSH_KEY containing a path to a valid SSH public key.
```
$ export TNSR_SSH_KEY="~/.ssh/id_rsa.pub"
```
Accept Azure Marketplace terms so that the image can be used to create VMs.
```
$ az vm image terms accept --urn ${TNSR_URN}
```
Note

Previous versions of Azure CLI used the command $ az vm image accept-terms --urn ${TNSR_URN}

Create a Storage Account.

$ az storage account create -n tnsrsa -g TNSR-Resource-Group

Create the TNSR Virtual Machine.

$ az vm create \
    --admin-username tnsr \
    --image ${TNSR_URN} \
    --name TNSR-Instance1 \
    --nics TNSR-MGMT-nic TNSR-WAN-nic TNSR-LAN-nic \
    --os-disk-size-gb 20 \
    --resource-group TNSR-Resource-Group \
    --size ${TNSR_SIZE} \
    --ssh-key-value ${TNSR_SSH_KEY} \
    --boot-diagnostics tnsrsa