Intersite Connectivity — VNet Peering & Routing

# Tạo Resource Groups
az group create --name rg-lab06-vnet-a --location southeastasia
az group create --name rg-lab06-vnet-b --location southeastasia

# Tạo VNet-A (Team Dev)
az network vnet create \
  --resource-group rg-lab06-vnet-a \
  --name vnet-a-lab06 \
  --address-prefix 10.1.0.0/16 \
  --subnet-name subnet-a \
  --subnet-prefix 10.1.1.0/24 \
  --location southeastasia

# Tạo VNet-B (Team Ops)
az network vnet create \
  --resource-group rg-lab06-vnet-b \
  --name vnet-b-lab06 \
  --address-prefix 10.2.0.0/16 \
  --subnet-name subnet-b \
  --subnet-prefix 10.2.1.0/24 \
  --location southeastasia

# Xác nhận 2 VNet
az network vnet list --output table

# Public IP Standard cho vm-a01
az network public-ip create \
  --resource-group rg-lab06-vnet-a \
  --name pip-vm-a01 \
  --sku Standard \
  --allocation-method Static

# Tạo vm-a01 (có Public IP, trong VNet-A)
az vm create \
  --resource-group rg-lab06-vnet-a \
  --name vm-a01 \
  --image Ubuntu2204 \
  --size Standard_B1s \
  --vnet-name vnet-a-lab06 \
  --subnet subnet-a \
  --public-ip-address pip-vm-a01 \
  --admin-username azureuser \
  --generate-ssh-keys

# Tạo vm-b01 (không có Public IP, trong VNet-B)
az vm create \
  --resource-group rg-lab06-vnet-b \
  --name vm-b01 \
  --image Ubuntu2204 \
  --size Standard_B1s \
  --vnet-name vnet-b-lab06 \
  --subnet subnet-b \
  --public-ip-address "" \
  --admin-username azureuser \
  --generate-ssh-keys

# Lấy private IP của vm-b01
az vm show -g rg-lab06-vnet-b -n vm-b01 \
  -d --query privateIps -o tsv

# Lấy Resource ID của VNet-B (cần cho cross-RG peering)
VNET_B_ID=$(az network vnet show \
  --resource-group rg-lab06-vnet-b \
  --name vnet-b-lab06 \
  --query id -o tsv)

# Tạo peering: VNet-A → VNet-B
az network vnet peering create \
  --resource-group rg-lab06-vnet-a \
  --name peer-a-to-b \
  --vnet-name vnet-a-lab06 \
  --remote-vnet $VNET_B_ID \
  --allow-vnet-access \
  --allow-forwarded-traffic

# Lấy Resource ID của VNet-A
VNET_A_ID=$(az network vnet show \
  --resource-group rg-lab06-vnet-a \
  --name vnet-a-lab06 \
  --query id -o tsv)

# Tạo peering ngược: VNet-B → VNet-A
az network vnet peering create \
  --resource-group rg-lab06-vnet-b \
  --name peer-b-to-a \
  --vnet-name vnet-b-lab06 \
  --remote-vnet $VNET_A_ID \
  --allow-vnet-access \
  --allow-forwarded-traffic

# Kiểm tra trạng thái peering
az network vnet peering list \
  --resource-group rg-lab06-vnet-a \
  --vnet-name vnet-a-lab06 \
  --output table

# Lấy Public IP của vm-a01
PIP_A=$(az network public-ip show \
  -g rg-lab06-vnet-a -n pip-vm-a01 \
  --query ipAddress -o tsv)
echo "Public IP vm-a01: $PIP_A"

# Lấy Private IP của vm-b01
PRIV_B=$(az vm show \
  -g rg-lab06-vnet-b -n vm-b01 \
  -d --query privateIps -o tsv)
echo "Private IP vm-b01: $PRIV_B"

# Xem effective routes trên NIC của vm-a01
NIC_A=$(az vm show -g rg-lab06-vnet-a -n vm-a01 \
  --query 'networkProfile.networkInterfaces[0].id' -o tsv | \
  awk -F'/' '{print $NF}')

az network nic show-effective-route-table \
  --resource-group rg-lab06-vnet-a \
  --name $NIC_A \
  --output table

# Test connectivity từ vm-a01 tới vm-b01 port 22
az network watcher test-connectivity \
  --resource-group rg-lab06-vnet-a \
  --source-resource vm-a01 \
  --dest-address $PRIV_B \
  --dest-port 22