Challenge: hub Bastion for a hub-and-spoke estate

تحدي: Bastion في الـ Hub لبيئة Hub-and-spoke

Contoso removed all public IPs from its VMs. Admins must reach vm-win01 (Windows, vnet-spoke) and vm-lnx01 (Linux, vnet-hub) only through one central Bastion in the hub, using the native client from their laptops, and the spoke must accept RDP only from Bastion. vnet-hub ( 10.80.0.0/16 ) and vnet-spoke ( 10.81.0.0/16 ) are already peered.

The 3 tasks you will do

• Requirement 1 — Deploy the hub Bastionالمتطلب 1 — انشر الـ Bastion في الـ Hub
• Requirement 2 — RDP to the spoke only from Bastionالمتطلب 2 — الـ RDP للـ Spoke من الـ Bastion بس
• Requirement 3 — Prove both connectionsالمتطلب 3 — اثبت الاتصالين

The lesson it belongs to

• Implement Azure Bastion