Configure Azure Private Link for Air Gap Protect

After you create Air Gap Protect storage, you can configure Azure Private Link for the storage.

To configure Azure Private Link, do the following:

1. Go to the Commvault Support Portal and request a storage resource ID.

2. In Azure, create a private endpoint using the storage resource ID. For more information, see Create a private endpoint.

3. Contact Commvault Support and provide the name of the private endpoint that you created, to request approval.

   Note

   The approval might take up to 10 business days.

4. After the private endpoint is approved, in Azure, verify that connection state for the private endpoint is Approved. For instructions, see Get Private Link connection states.

5. Update your DNS server to resolve your storage account endpoint to the IP address of the private endpoint.

   To get the name of the storage account, go to Manage > Air Gap Protect and click the storage. For example, in the following image, the name of the storage account is AGP-Bahrain:

   

6. For the subnet that contains the private endpoint, disable the following subnet properties:

   • privateLinkServiceNetworkPolicies: Disabled

   • privateEndpointNetworkPolicies: Disabled

   For instructions, see the following pages in the Microsoft documentation:

   • Disable network policies for Private Link service source IP

   • Manage network policies for private endpoints