Scenario:
- Azure
- Firewall VNet and 4 x subnets already created in rg1
- vFTD deployed to Firewall VNet and rg2
Issue:
- no routing tables are created for the FTD subnets
Why preconfigure the vnet and rg1?
- The FTD deployment will not work if there are any objects in the target resource group
- Some people use subnet segregation rather that hub and spoke / multiple vnets.
- Some Azure services are unable to traverse VNets, e.g. Azure Bastion.
- VNet & subnet can be provisioned by Terraform in advance.