我试图在Azure中编写一堆资源的脚本,作为其中的一部分,我需要一个Web应用程序,以便能够通过vNet与VM上运行的服务进行通信. @H_404_2@我已经创建了一个模板,它似乎做了创建连接所需的一切,但由于某种原因没有建立连接.查看门户网站显示该站点已连接到vNet并且证书已同步,但vNet网关上的点对站配置未显示活动连接.

@H_404_2@但是,如果我从vNet断开Web应用程序的连接,然后使用Azure门户中的设置按钮重新连接到同一个vNet,则一切正常.

@H_404_2@我的模板中肯定会有一些东西丢失,但过去几个小时看起来我无法解决问题

@H_404_2@这是我的ARM模板

{
  "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion": "1.0.0.0","parameters": {
  },"variables": {

  },"resources": [
    {
      "type": "Microsoft.Network/networkSecurityGroups","name": "[variables('nsgName')]","apiVersion": "2016-03-30","location": "[parameters('location')]","properties": {
        "securityRules": []
      },"resources": [ ],"dependsOn": [ ]
    },{
      "type": "Microsoft.Network/networkSecurityGroups","name": "[variables('infrastructureNsgName')]",{
      "type": "Microsoft.Network/virtualNetworks","name": "[variables('vnetName')]","properties": {
        "addressSpace": {
          "addressPrefixes": [
            "10.1.0.0/16"
          ]
        },"subnets": [
          {
            "name": "default","properties": {
              "addressPrefix": "10.1.0.0/17","networkSecurityGroup": {
                "id": "[resourceId('Microsoft.Network/networkSecurityGroups',variables('nsgName'))]"
              }
            }
          },{
            "name": "infrastructure","properties": {
              "addressPrefix": "10.1.254.0/24",variables('infrastructureNsgName'))]"
              }
            }
          },{
            "name": "GatewaySubnet","properties": {
              "addressPrefix": "10.1.128.0/24"
            }
          }
        ]
      },"dependsOn": [
        "[resourceId('Microsoft.Network/networkSecurityGroups',variables('nsgName'))]","[resourceId('Microsoft.Network/networkSecurityGroups',variables('infrastructureNsgName'))]"
      ]
    },{
      "type": "Microsoft.Web/sites","kind": "api","name": "[variables('gatewaySiteName')]","apiVersion": "2015-08-01","properties": {
        "name": "[variables('gatewaySiteName')]","hostNames": [
          "[concat(variables('gatewaySiteName'),'.azurewebsites.net')]"
        ],"enabledHostNames": [
          "[concat(variables('gatewaySiteName'),'.azurewebsites.net')]","[concat(variables('gatewaySiteName'),'.scm.azurewebsites.net')]"
        ],"hostNameSslStates": [
          {
            "name": "[concat(variables('gatewaySiteName'),"sslState": 0,"thumbprint": null,"ipBasedSslState": 0
          },{
            "name": "[concat(variables('gatewaySiteName'),'.scm.azurewebsites.net')]","ipBasedSslState": 0
          }
        ],"serverFarmId": "[resourceId('Microsoft.Web/serverfarms',variables('gatewayServerFarmName'))]"
      },"resources": [],"dependsOn": [
        "[resourceId('Microsoft.Web/serverfarms',variables('gatewayServerFarmName'))]","[concat('Microsoft.Network/virtualNetworks/',variables('vnetName'))]"
      ]
    },{
      "type": "Microsoft.Web/serverfarms","sku": {
        "name": "S1","tier": "Standard","size": "S1","family": "S","capacity": 1
      },"kind": "","name": "[variables('gatewayServerFarmName')]","properties": {
        "name": "[variables('gatewayServerFarmName')]","numberOfWorkers": 1
      },{
      "name": "[variables('vnetGatewayIpName')]","type": "Microsoft.Network/publicIPAddresses","apiVersion": "2015-06-15","properties": {
        "publicIPAllocationMethod": "Dynamic"
      }
    },{
      "name": "[variables('vnetGatewayName')]","type": "Microsoft.Network/virtualNetworkGateways","dependsOn": [
        "[concat('Microsoft.Network/publicIPAddresses/',variables('vnetGatewayIpName'))]",variables('vnetName'))]"
      ],"properties": {
        "ipConfigurations": [
          {
            "properties": {
              "privateIPAllocationMethod": "Dynamic","subnet": {
                "id": "[resourceId('Microsoft.Network/virtualNetworks/subnets',variables('vnetName'),'GatewaySubnet')]"
              },"publicIPAddress": {
                "id": "[resourceId('Microsoft.Network/publicIPAddresses',variables('vnetGatewayIpName'))]"
              }
            },"name": "vnetGatewayConfig"
          }
        ],"gatewayType": "Vpn","vpnType": "RouteBased","enableBgp": false,"vpnClientConfiguration": {
          "vpnClientAddressPool": {
            "addressPrefixes": [
              "172.16.201.0/24"
            ]
          },"vpnClientRootCertificates": [
            {
              "name": "AppServiceCertificate.cer","properties": {
                "PublicCertData": "[reference(concat('Microsoft.Web/sites/',variables('gatewaySiteName'),'/virtualNetworkConnections/virtualNetworkConnections')).certBlob]"
              }
            }
          ]
        }
      }
    },{
      "name": "[variables('gatewayVnetConnectionName')]","type": "Microsoft.Web/sites/virtualNetworkConnections","dependsOn": [
        "[concat('Microsoft.Web/sites/',variables('gatewaySiteName'))]","properties": {
        "vnetResourceId": "[resourceId('Microsoft.Network/virtualNetworks',variables('vnetName'))]"
      }
    }
  ]
}

# Set VNET Integration for Web App

$ResourceGroup = "WeMadeThatInWestEuropeDidntWe"
$WebApp = "LearningMomentsInProduction"
$PropertiesObject = @{
       vnetName = "JimAreYouSureThisIsTheStagingVNET";
}

Set-AzureRmResource -PropertyObject $PropertiesObject `
                    -ResourceGroupName $ResourceGroup `
                    -ResourceType Microsoft.Web/sites/config `
                    -ResourceName $WebApp/web `
                    -ApiVersion 2015-08-01 -Force -Verbose |
                        Select -expand Properties |
                        Select VnetName

# Expected output:
#
#  VnetName                                   
#  --------                                   
#  JimAreYouSureThisIsTheStagingVNET
#
# At this point your Web App is hooked up to the VNET

$ResourceGroup = "WeMadeThatInWestEuropeDidntWe"
# VNET Name or Gateway name,try with gateway name!
$vnetName = "JimAreYouSureThisIsTheStagingVNET";

$PropertiesObject = @{
  resyncrequired = "true"
}

Set-AzureRmResource -PropertyObject $PropertiesObject -ResourceGroupName $ResourceGroup `
                    -ResourceType Microsoft.Web/sites/virtualNetworkConnections `
                    -ResourceName $VnetName
                    -ApiVersion 2015-08-01 `
                    -Force -Verbose