Azure Public IP Prefix for Cloud Guard VMSS

Marcel_M — Mon, 14 Sep 2020 14:06:56 GMT

Hello, we need the ability to user Public IP Prefixes in Azure on our Cloud Guard VMSS.

It makes it easier for us to maintain our VMSS Clusters with a dedicated Public IP Prefix. So we can whitelist/allow special IP ranges.

I tried to edit the VMSS ARM Template by myself, but I was not successful so far https://github.com/CheckPointSW/CloudGuardIaaS/blob/master/azure/templates/marketplace-vmss/mainTemplate.json

Anyone else tried this with any success ?

Can Check Point please implement this feature?

BR
Marcel

Re: Azure Public IP Prefix for Cloud Guard VMSS

Sunny_Leung — Thu, 21 Jan 2021 03:41:29 GMT

modify the template by replacing the public IP creation section with public IP prefix, VMSS deployment will use IP from the predefined prefix. such as search "publicIpAddressConfiguration" in the template:

"publicIpAddressConfiguration": "[if(equals(parameters('instanceLevelPublicIP'),'yes'), variables('publicIPProperties'), json('null'))]",

replace it by:

"publicIpAddressConfiguration": {
"name": "pubIP",
"properties": {
"idleTimeoutInMinutes": 15,
"PublicIpPrefix": {
"Id": "your resource ID of the public IP prefix"
}
}
},

I not tested it fully, and the the name of public IP object created in IP prefix have the same name for all VMSS instance, you need to refine the template , such as the public IP name different for each instance, etc.

topic Re: Azure Public IP Prefix for Cloud Guard VMSS in Cloud Firewall

Azure Public IP Prefix for Cloud Guard VMSS

Re: Azure Public IP Prefix for Cloud Guard VMSS