Deploying Traffic Manager in Azure Portal
Use the Azure Management portal to create a cluster of virtual machine instances based on the Traffic Manager template contained in the Azure marketplace.
- On Azure Marketplace portal, search for Ivanti Virtual Traffic Manager with WAF.
- Below image is displayed in results, select it for deployment.
- For instance select the BYOL Edition (under Plans + Pricing), however, you can choose from the other options listed below.
- Enter the Resource Group, Virtual machine name, Region, Image etc details.
- Scroll down and select machine size, Authentication type should be SSH public key, relevant inputs for the below fields can be given to generate a new key pair.
Username field is not used, login to the VTM Admin-UI or through ssh is being done using Administrator (admin) account.
- Select Disk Management as needed.
- Provide the networking info such as Virtual network, Subnet, NSG etc.
- In Management, Monitoring, Advanced, Tags default values present can be retained, else if required, can be modified appropriately based on requirement.
- Select Create option in the final Review + Create page
- Download the private key generated to performing ssh login into the newly created VTM azure instance.
When creating a 2 or more vTM’s to be the same Cluster, it is recommended to select the following parameters similar to the 1st vTM (1. Resource group, 2.SSH Public Key Source, 3. Virtual Network, 4. Network Security Group).
Creating a Traffic Manager HA Cluster in the Azure Portal
Use the Azure Management portal to create a cluster of virtual machine instances based on the Traffic Manager template contained in the Azure marketplace.
To create a Traffic Manager HA cluster using the Azure Management portal
- Deploy a multiple vTM instances following the steps provided in Deploying Traffic Manager in Azure Portal
- Create an Azure Load Balancer. From the Azure Home page under Azure Services, select Load balancers and then click on create.
- Provide the Resource Group info same as the vTMs.
- Create the Front End IP configuration as shown below.
- Create the Backend Pools (In this case the nodes are vTM1 and vTM2).
- Add the resources (the vTM’s as shown below).
- Add the inbound NAT Rule as shown below. For the second vTM use the Frontend Port as 9091 (as it is already mapped the 9090 to vTM1) .
Ensure to add the right names (example: AdminUI_vTM1 for 9090 and AdminUI_vTM2 for 9091, this helps to identify the purpose of the rule by the name).
- Proceed to add the outbound rules from the Azure portal and create the Load Balancer. The vTM is now available as a High Availability pair.
- Add more configuration to the Azure LB as needed from the below location.
Connecting to the Admin UI
- After cluster is created, you will see the following resources showing in the overview of your Resource Group. As you see for this Cluster, the NSG (Network Security Group), the Virtual Network and the SSH Key are common to this Cluster).
- Click on virtual machine (in this case“1vTM” as shown below).
- Scroll down to bottom left side of the page and click Boot Diagnostics.
- In the next page, click on Serial log and then click on Download serial log.
- This takes you to a new browser, here search for password using ctrl + f and as show in figure below. Use this password in the UI on prompt for the first time, change the password using Initial Configuration Wizard in the next section.
- Click on NSG.
- Add an inbound rule for Port 9090 as shown below.
- Go back to VM (vTM) Overview page and use the fully qualified public DNS name or public IP address for deployment on Web browser to access the Admin UI on one of Traffic Manager instances. For example, to access the Admin UI for the first instance in your cluster using the details shown in figure, enter the following https://Public IP address:9090.
If you are trying to connect to the deployed VTM Admin-UI for the first time and if you are facing error saying the instance is inaccessible, then restart the VTM instance.
REST API access is initially disabled in your instances. To enable REST access, configure your Traffic Manager instances and enable REST through the Admin UI. For more details, see the Virtual Traffic Manager: User’s Guide.
To learn more about resource groups, see https://azure.microsoft.com/en-gb/documentation/articles/resource-group-overview/.
If your Traffic Manager instance has not yet been configured, first complete the Initial Configuration wizard. This wizard allows you to specify the initial time and security settings for your Traffic Manager. For more information, see Using the Initial Configuration Wizard.