Create a Management Resource Group and VNets

The Azure Resource Template deployment process creates the CloudShell management resource group, the CloudShell Management VNet and CloudShell Sandbox VNet within the resource group and a peering between these networks, which are detailed in Microsoft Azure Integration. You will then need to configure the Execution Server and QualiX Server created in the CloudShell Management VNet to access the Quali Server.

Tip: The below procedure assumes you already have CloudShell Server installed locally. However, if you plan on installing CloudShell Server on the Azure region, manually create a resource group for the CloudShell integration, install CloudShell Server on a dedicated VM in this resource group, deploy the Azure Resource Template on this resource group (no need to create a VPN), and create a virtual network peering between the CloudShell Server VM's VNet and the CloudShell management VNet to be created. For additional information, see Integrating Azure with Cloud-based CloudShell Installation.

To create a CloudShell management resource group and the required networks:

  1. Log in to https://portal.azure.com and open the Templates blade.

  2. Add a new Template.
    1. In the General blade, fill in a Name (for example, "cloudshell") and a Description, and click OK.
    2. In the ARM Template blade, replace the contents with the contents of the suitable Azure template file.

      The Azure template file is provided as a JSON file in Quali's Download Center for each CloudShell release version.

    3. Click OK.
    4. Click Add.
  3. Refresh the Templates blade to see the new Template.

  4. Click the name of the new Template.
  5. In the blade that appears, click Deploy.

    The Custom deployment page is displayed.

    1. Specify the Subscription, Resource group, and the resource group's Location.
    2. In the Settings area, fill in the deployment parameters.

      CloudShell Admin Required The CloudShell admin user
      CloudShell Admin Password Required The CloudShell admin’s password
      CloudShell Server IP Required The IP address of the Quali Server
      CloudShell SSH User Name Required

      Create a user name and password to be used to connect to the QualiX and Execution Server that will be created in Azure.

      Make sure you save these credentials for future use.

      CloudShell SSH Password Required

      Create a password to be used with the CloudShell SSH User Name.

      Password must contain 12-72 characters and include 1 lower case character, 1 upper case character and 1 special character.

      Management Vnet CIDR Required

      The IP range (in CIDR notation) to be used for the CloudShell Management VNet. Specify a class C CIDR (/24).

      For example: "192.168.120.0/24".

      Management Vnet VPN Subnet CIDR Required

      (Relevant if Create VPN Endpoint is set to True) The IP range (in CIDR notation) of the subnet in which the VPN connection is set. This range must be included in the CloudShell Management VNet’s range.

      For example: "192.168.120.0/28".

      Management Vnet Subnet CIDR Required

      The IP range (in CIDR notation) of the subnet to be used by the CloudShell Management VNet.

      This range must be included in the CloudShell Management VNet’s range. This subnet is used by CloudShell components such as QualiX Server and Execution Server.

      For example: "192.168.120.16/28".

      Deployment Mode Required

      Use external deployment to create a QualiX VM with a public IP, or internal deployment to create the QualiX VM with a private IP. Possible values are External and Internal.

      The private IP is accessible from the networks that are connected to the CloudShell Management VNet (such as the network in which the Quali Server resides).

      Create VPN Endpoint Required Set to True to create a VPN endpoint to the CloudShell Management VNet to support a hybrid scenario.
      On Premise CIDR Optional

      The IP range (in CIDR notation) of the private network in which the Quali Server resides (outside of the CloudShell Management VNet).

      VPN Address Optional The public IP address of the router on the network in which Quali Server resides.
      Sandbox Vnet CIDR Optional The IP range (in CIDR notation) to be used for the Sandbox VNet.
      Sandbox Vnet Subnet CIDR Optional The IP range (in CIDR notation) of the deafult subnet that will be created for the Sandbox VNet. This range must be included in the Sandbox VNet’s range. Note that after the template is deployed you can delete this redundant subnet manually.
  6. In the Terms and Conditions area, select I agree to the terms and conditions stated above.
  7. Click Purchase.

    The Template is being deployed.

    If an error message is displayed, click the message to learn more about the error.

    To track the deployment's progress, click the Notifications button.

  8. The Azure Template deployment's output includes the QualiX Public IP and, if required, the VPN Public IP. You will need this information to connect to the Azure subnets and App VMs from CloudShell.

    1. From the main menu, select Resource Groups and then click the name of the resource group.

    2. In the blade that appears, click Deployments.
    3. For the QualiX Public IP, click the QualiX deployment.
    4. (If VPN was configured in the Azure Template) For the VPN Public IP, click the VPN deployment.
  9. Next, if your installation requires a VPN connection, Connect the CloudShell Management VNet to Quali Server. If not, Add an Azure Cloud Provider Resource.