Configuring Azure ExpressRoute and Private Link

You can configure the Azure ExpressRoute circuit and Azure Private Link (Private Endpoint) for Air Gap Protect.

Configuring Azure ExpressRoute

As the ExpressRoute is completely transparent to Air Gap Protect, no additional approval or configuration is required for Air Gap Protect. (For information about configuring the Azure ExpressRoute circuit, see https://docs.microsoft.com/en-ca/azure/expressroute/expressroute-howto-circuit-portal-resource-manager.)

Configuring Azure Private Link (Private Endpoint)

1. Configure Air Gap Protect in Commvault software. For more information, see Configuring Air Gap Protect.

2. Contact Commvault Customer Support and obtain a Storage Resource ID. You can contact CommvaultCustomer Support by logging a ticket in the Maintenance Advantage Customer Support Portal.

3. Create a Private Endpoint using the Storage Resource ID in your own Azure subscription. For more information, see https://docs.microsoft.com/en-us/azure/private-link/create-private-endpoint-portal#create-a-private-endpoint.

4. Contact Commvault Customer Support and provide the name of the Private Endpoint that you created, to request approval.

5. Once the Private Endpoint is approved, verify that the value for the CONNECTION STATE for the endpoint is displayed as Approved.

6. Update your DNS server to resolve your storage account endpoint to the Private Link's IP address.

   Notes

   • To obtain the storage account endpoint, see Obtaining the Storage Account Name.

   • The network policy must be disabled for the subnet containing the Private Endpoint. Specifically, the following subnet properties must be disabled:

     • privateLinkServiceNetworkPolicies: Disabled

     • privateEndpointNetworkPolicies: Disabled

Related Topics

• https://docs.microsoft.com/en-us/azure/private-link/disable-private-link-service-network-policy

• https://docs.microsoft.com/en-us/azure/private-link/disable-private-endpoint-network-policy