This lab is currently in Beta, content may be updated as we refine the material
LABINTERMEDIATE

VPN Gateway, ExpressRoute, and Hybrid Connectivity Decisions

A scenario-driven lab: compare VPN Gateway, ExpressRoute, and Virtual WAN, size a gateway SKU, design hybrid DNS, and build the live network foundation a gateway attaches to without waiting 30-45 minutes for a gateway to provision.

60 minutes
cloud/azure
VPN Gateway, ExpressRoute, and Hybrid Connectivity Decisions - Platform Engineering Hands-On Lab Icon
Share this Lab

Lab Overview

Hybrid connectivity is a core AZ-104 networking topic, but live VPN gateway provisioning takes 30 to 45 minutes and ExpressRoute is impractical and costly to provision in a student lab. This is a scenario-and-artifact lab, not a live gateway deployment lab.

You will analyze a hybrid connectivity requirement set, choose between VPN Gateway, ExpressRoute, and Virtual WAN, size a VPN gateway SKU, and design hybrid DNS resolution, recording each decision as a reviewable architecture artifact.

The only live, Contributor-safe work is building the network foundation that a gateway would attach to: a virtual network, a correctly named GatewaySubnet sized at /27, and a Standard static public IP for the gateway. You will inspect and validate that foundation. The gateway itself, ExpressRoute, and Virtual WAN remain documented walkthroughs and decision artifacts so the lab never waits on gateway provisioning.

What You'll Learn

Analyze hybrid connectivity requirements and map them to VPN Gateway, ExpressRoute, or Virtual WAN

Author a connectivity decision artifact that justifies the chosen connectivity model

Build the live network foundation for a gateway: a VNet, a GatewaySubnet sized at /27, and a Standard static public IP

Document the az network vnet-gateway create command without waiting on live gateway provisioning

Design a hybrid DNS forwarding pattern for on-premises and Azure name resolution

Prerequisites

Basic command line familiarity

Basic understanding of Azure virtual networks, subnets, and public IPs

Basic networking knowledge of IP addressing, routing, and DNS

Technologies Covered

azureaz-104networkingvpn-gatewayexpressroutehybrid-connectivity

Part of a Course

This lab is part of the Microsoft Azure Administrator (AZ-104) course

View All Courses

Choose your plan

Simple, Transparent Pricing

Unlock full access to TeKanAid courses, labs, and bootcamps

Buying for a team? Private corporate training is available for up to 15 learners.View team training
MonthlyQuarterly
Try Premium free for 7 days →

Just exploring? Start free below. Want the full experience? Try Premium free for 7 days (card required, $0 today).

Pro

All courses, with lab scripts to run on your own machine

$59/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Full access to all courses
  • Lab scripts to download and run on your own machine (hosted labs not included)
  • Progress tracking
  • Certificate of completion
  • Community access
  • Bootcamp participation
  • New content access
Recommended

Premium

Full access, including unlimited hosted labs

$99/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Everything in Pro
  • Unlimited hands-on labs, fully hosted on TeKanAid Academy (nothing to set up)
  • Lab AI Assistant
  • Accelerator bootcamps with live office hours
  • Priority support

Prefer a single course?

Purchase individual courses for a one-time fee of $79. Full access to course content, quizzes, certificates, and community features, lab access is not included.

Browse Courses

Just exploring? Start free, no account needed

Three free ways to start. All bridge into the paid Premium catalog when you're ready.

Not ready to commit? The crash course is email-only. No academy account required.

Ready to Get Started?

Start this hands-on lab and build real-world Platform Engineering skills

Get Access Now