使用 VPN 将 Azure Stack Hub 连接到 AzureConnect Azure Stack Hub to Azure using VPN

本文介绍如何创建站点到站点 VPN,将 Azure Stack Hub 中的虚拟网络连接到 Azure 中的虚拟网络。This article describes how to create a site-to-site VPN to connect a virtual network in Azure Stack Hub to a virtual network in Azure.

准备阶段Before you begin

若要完成连接配置,请确保在开始之前准备好以下各项:To complete the connection configuration, make sure you have the following items before you begin:

  • 直接连接到 Internet 的 Azure Stack Hub 集成系统(多节点)部署。An Azure Stack Hub integrated systems (multi-node) deployment that is directly connected to the internet. 必须能够从公共 Internet 直接连接到外部公共 IP 地址范围。Your external public IP address range must be directly reachable from the public internet.
  • 有效的 Azure 订阅。A valid Azure subscription. 如果没有 Azure 订阅,可在此处创建一个 1 元试用 Azure 帐户If you don't have an Azure subscription, you can create a 1rmb trial Azure account here.

VPN 连接关系图VPN connection diagram

下图显示了完成后的连接配置示意图:The following figure shows what the connection configuration should look like when you're done:

站点到站点 VPN 连接配置

网络配置示例值Network configuration example values

网络配置示例表显示本文中用于示例的值。The network configuration examples table shows the values that are used for examples in this article. 可以使用这些值或参考这些值,以更好地了解本文中的示例:You can use these values, or you can refer to them to better understand the examples in this article:

Value Azure Stack HubAzure Stack Hub AzureAzure
虚拟网络名称Virtual network name Azs-VNetAzs-VNet AzureVNetAzureVNet
虚拟网络地址空间Virtual network address space 10.1.0.0/1610.1.0.0/16 10.100.0.0/1610.100.0.0/16
子网名称Subnet name FrontEndFrontEnd FrontEndFrontEnd
子网地址范围Subnet address range 10.1.0.0/2410.1.0.0/24 10.100.0.0/2410.100.0.0/24
网关子网Gateway subnet 10.1.1.0/2410.1.1.0/24 10.100.1.0/2410.100.1.0/24

在 Azure 中创建网络资源Create the network resources in Azure

首先,为 Azure 创建网络资源。First, create the network resources for Azure. 以下说明介绍如何使用 Azure 门户来创建资源。The following instructions show how to create the resources by using the Azure portal.

创建虚拟网络和虚拟机 (VM) 子网Create the virtual network and virtual machine (VM) subnet

  1. 使用 Azure 帐户登录到 Azure 门户Sign in to the Azure portal using your Azure account.
  2. 在用户门户中,选择“+ 创建资源”。In the user portal, select + Create a resource.
  3. 转到市场,然后选择“网络”。Go to Marketplace, and then select Networking.
  4. 选择“虚拟网络”。Select Virtual network.
  5. 使用网络配置表中的信息来识别 Azure 的“名称”、“地址空间”、“子网名称”和“子网地址范围”的值。 Use the information from the network configuration table to identify the values for Azure Name, Address space, Subnet name, and Subnet address range.
  6. 对于“资源组”,可以创建新的资源组,也可以选择“使用现有项”(如果已有了一个)。 For Resource Group, create a new resource group or, if you already have one, select Use existing.
  7. 选择 VNet 的位置Select the Location of your VNet. 如果使用示例值,请选择“中国东部”,或使用另一个位置。If you're using the example values, select China East or use another location.
  8. 选择“固定到仪表板”。Select Pin to dashboard.
  9. 选择“创建” 。Select Create.

创建网关子网Create the gateway subnet

  1. 从仪表板打开刚创建的虚拟网络资源 (AzureVNet)。Open the virtual network resource you created (AzureVNet) from the dashboard.

  2. 在“设置”部分中选择“子网”。 On the Settings section, select Subnets.

  3. 选择“网关子网”,将网关子网添加到虚拟网络。Select Gateway subnet to add a gateway subnet to the virtual network.

  4. 默认情况下,子网的名称设置为 GatewaySubnetThe name of the subnet is set to GatewaySubnet by default.

    重要

    网关子网很特殊,必须使用该特定名称才能正常运行。Gateway subnets are special and must have this specific name to function properly.

  5. 在“地址范围”字段中,检查地址是否为 10.100.1.0/24In the Address range field, verify the address is 10.100.1.0/24.

  6. 选择“确定”创建网关子网。Select OK to create the gateway subnet.

创建虚拟网络网关Create the virtual network gateway

  1. 在 Azure 门户中,选择“+ 创建资源”。In the Azure portal, select + Create a resource.

  2. 转到市场,然后选择“网络”。Go to Marketplace, and then select Networking.

  3. 从网络资源列表中选择“虚拟网络网关”。From the list of network resources, select Virtual network gateway.

  4. 在“名称”字段中,键入 Azure-GWIn the Name field, type Azure-GW.

  5. 若要选择虚拟网络,请选择“虚拟网络”。To choose a virtual network, select Virtual network. 然后从列表中选择“AzureVnet”。Then select AzureVnet from the list.

  6. 选择“公共 IP 地址”。Select Public IP address. 当“选择公共 IP 地址”部分打开时,选择“新建” 。When the Choose public IP address section opens, select Create new.

  7. 在“名称”字段中键入 Azure-GW-PiP,然后选择“确定”。 In the Name field, type Azure-GW-PiP, and then select OK.

  8. 验证“订阅”和“位置”是否正确。 Verify that Subscription and Location are correct. 可将资源固定到仪表板。You can pin the resource to the dashboard. 选择“创建” 。Select Create.

创建本地网关资源Create the local network gateway resource

  1. 在 Azure 门户中,选择“+ 创建资源”。In the Azure portal, select + Create a resource.

  2. 转到市场,然后选择“网络”。Go to Marketplace, and then select Networking.

  3. 从资源列表中选择“本地网络网关”。From the list of resources, select Local network gateway.

  4. 在“名称”字段中,键入 Azs-GWIn the Name field, type Azs-GW.

  5. 在“IP 地址”字段中,键入前面在网络配置表中列出的 Azure Stack Hub 虚拟网关的公共 IP 地址。In the IP address field, type the public IP address for your Azure Stack Hub Virtual Network Gateway that is listed previously in the network configuration table.

  6. 在 Azure Stack Hub 的“地址空间”字段中,键入 AzureVNet10.1.0.0/2410.1.1.0/24 地址空间。In the Address Space field, from Azure Stack Hub, type the 10.1.0.0/24 and 10.1.1.0/24 address space for AzureVNet.

  7. 确认“订阅”、“资源组”和“位置”正确无误,然后选择“创建”。 Verify that your Subscription, Resource Group, and Location are correct, and then select Create.

创建连接Create the connection

  1. 在用户门户中,选择“+ 创建资源”。In the user portal, select + Create a resource.

  2. 转到市场,然后选择“网络”。Go to Marketplace, and then select Networking.

  3. 从资源列表中选择“连接”。From the list of resources, select Connection.

  4. 在“基本”设置部分,选择“站点到站点(IPSec)”作为“连接类型”。 On the Basic settings section, for the Connection type, choose Site-to-site (IPSec).

  5. 选择“订阅”、“资源组”和“位置”,然后选择“确定”。 Select the Subscription, Resource Group, and Location, and then select OK.

  6. 在“设置”部分,依次选择“虚拟网络网关”、“Azure-GW”。 On the Settings section, select Virtual network gateway, and then select Azure-GW.

  7. 依次选择“本地网络网关”、“Azs-GW”。 Select Local network gateway, and then select Azs-GW.

  8. 在“连接名称”中,键入 Azure-AzsIn Connection name, type Azure-Azs.

  9. 在“共享密钥(PSK)”中键入 12345,然后选择“确定”。 In Shared key (PSK), type 12345, then select OK.

    备注

    如果将另一值用于共享密钥,请记住,该值必须与在连接另一端创建的共享密钥值匹配。If you use a different value for the shared key, remember that it must match the value for the shared key that you create on the other end of the connection.

  10. 查看“摘要”部分,然后选择“确定” 。Review the Summary section, and then select OK.

创建自定义 IPSec 策略Create a custom IPSec policy

由于版本 1910 和更高版本中已更改 IPSec 策略的 Azure Stack Hub 默认参数,因此需要自定义 IPSec 策略才能使 Azure 与 Azure Stack Hub 匹配。Since the Azure Stack Hub default parameters for IPSec policies have changed for builds 1910 and later, a custom IPSec policy is needed in order for Azure to match Azure Stack Hub.

  1. 创建自定义策略:Create a custom policy:

    $IPSecPolicy = New-AzIpsecPolicy -IkeEncryption AES256 -IkeIntegrity SHA384 -DhGroup ECP384  `
    -IpsecEncryption GCMAES256 -IpsecIntegrity GCMAES256 -PfsGroup ECP384 -SALifeTimeSeconds 27000 `
    -SADataSizeKilobytes 102400000
    
  2. 将策略应用于连接:Apply the policy to the connection:

    $Connection = Get-AzVirtualNetworkGatewayConnection -Name myTunnel -ResourceGroupName myRG
    Set-AzVirtualNetworkGatewayConnection -IpsecPolicies $IPSecPolicy -VirtualNetworkGatewayConnection $Connection
    

创建 VMCreate a VM

现在请在 Azure 中创建一个 VM,然后将其置于虚拟网络的 VM 子网上。Now create a VM in Azure, and put it on your VM subnet in your virtual network.

  1. 在 Azure 门户中,选择“+ 创建资源”。In the Azure portal, select + Create a resource.

  2. 转到“市场”,选择“计算”。 Go to Marketplace, and then select Compute.

  3. 在 VM 映像列表中,选择“Windows Server 2016 Datacenter Eval”映像。In the list of VM images, select the Windows Server 2016 Datacenter Eval image.

  4. 在“基本”部分的“名称”中,键入 AzureVMOn the Basics section, for Name, type AzureVM.

  5. 键入有效的用户名和密码。Type a valid username and password. 创建 VM 之后,将使用此帐户来登录 VM。You use this account to sign in to the VM after it's created.

  6. 提供“订阅”、“资源组”和“位置”,并选择“确定”。 Provide a Subscription, Resource Group, and Location, and then select OK.

  7. 在“大小”部分,为此实例选择一种 VM 大小,然后选择“选择”。 On the Size section, select a VM size for this instance, and then select Select.

  8. 在“设置”部分,可以使用默认设置。In the Settings section, you can use the default settings. 在选择“确定”之前,请确认:Before you select OK, confirm that:

    • AzureVnet 虚拟网络已选中。The AzureVnet virtual network is selected.
    • 子网已设置为 10.100.0.0/24The subnet is set to 10.100.0.0/24.

    选择“确定” 。Select OK.

  9. 在“摘要”部分检查设置,然后选择“确定” 。Review the settings on the Summary section, and then select OK.

在 Azure Stack Hub 中创建网络资源Create the network resources in Azure Stack Hub

接下来,在 Azure Stack Hub 中创建网络资源。Next, create the network resources in Azure Stack Hub.

以用户身份登录Sign in as a user

服务管理员可以用户身份登录,对其用户可能使用的计划、套餐和订阅进行测试。A service admin can sign in as a user to test the plans, offers, and subscriptions that their users might use. 请在登录之前创建用户帐户(如果尚未这样做)。If you don't already have one, create a user account before you sign in.

创建虚拟网络和 VM 子网Create the virtual network and a VM subnet

  1. 使用用户帐户登录到用户门户。Use a user account to sign in to the user portal.

  2. 在用户门户中,选择“+ 创建资源”。In the user portal, select + Create a resource.

    创建新虚拟网络

  3. 转到市场,然后选择“网络”。Go to Marketplace, and then select Networking.

  4. 选择“虚拟网络”。Select Virtual network.

  5. 对于“名称”、“地址空间”、“子网名称”和“子网地址范围”,请使用网络配置表中的值。 For Name, Address space, Subnet name, and Subnet address range, use the values from the network configuration table.

  6. “订阅”中显示了前面创建的订阅。In Subscription, the subscription that you created earlier appears.

  7. 对于“资源组”,可以创建资源组,也可以选择“使用现有项”(如果已有了一个)。 For Resource Group, you can either create a resource group or if you already have one, select Use existing.

  8. 验证默认位置。Verify the default location.

  9. 选择“固定到仪表板”。Select Pin to dashboard.

  10. 选择“创建” 。Select Create.

创建网关子网Create the gateway subnet

  1. 在仪表板上,打开创建的 Azs-VNet 虚拟网络资源。On the dashboard, open the Azs-VNet virtual network resource you created.

  2. 在“设置”部分中选择“子网”。 On the Settings section, select Subnets.

  3. 若要将网关子网添加到虚拟网络,请选择“网关子网”。To add a gateway subnet to the virtual network, select Gateway Subnet.

    添加网关子网

  4. 子网名称默认设置为 GatewaySubnetBy default, the subnet name is set to GatewaySubnet. 要使网关子网正常运行,它们必须使用 GatewaySubnet 名称。For gateway subnets to function properly, they must use the GatewaySubnet name.

  5. 在“地址范围”中,确认地址是 10.1.1.0/24In Address range, verify that the address is 10.1.1.0/24.

  6. 选择“确定”创建网关子网。Select OK to create the gateway subnet.

创建虚拟网络网关Create the virtual network gateway

  1. 在 Azure Stack Hub 门户中,选择“+ 创建资源”。In the Azure Stack Hub portal, select + Create a resource.

  2. 转到市场,然后选择“网络”。Go to Marketplace, and then select Networking.

  3. 从网络资源列表中选择“虚拟网络网关”。From the list of network resources, select Virtual network gateway.

  4. 在“名称”中,键入 Azs-GWIn Name, type Azs-GW.

  5. 选择“虚拟网络”项以选择虚拟网络。Select the Virtual network item to choose a virtual network. 从列表中选择“Azs-VNet”。Select Azs-VNet from the list.

  6. 选择“公共 IP 地址”菜单项。Select the Public IP address menu item. 当“选择公共 IP 地址”部分打开时,选择“新建” 。When the Choose public IP address section opens, select Create new.

  7. 在“名称”中键入 Azs-GW-PiP,然后选择“确定”。 In Name, type Azs-GW-PiP, and then select OK.

  8. 对于“VPN 类型”,默认选择“基于路由”。 By default, Route-based is selected for VPN type. 保留“基于路由”VPN 类型。Keep the Route-based VPN type.

  9. 验证“订阅”和“位置”是否正确。 Verify that Subscription and Location are correct. 可将资源固定到仪表板。You can pin the resource to the dashboard. 选择“创建” 。Select Create.

创建本地网关Create the local network gateway

在 Azure Stack Hub 中,“本地网关”的概念与在 Azure 部署中不同。The concept of a local network gateway in Azure Stack Hub is different than in an Azure deployment.

在 Azure 部署中,本地网关代表一个本地(位于用户位置)物理设备,可连接到 Azure 中的虚拟网关。In an Azure deployment, a local network gateway represents an on-premises (at the user location) physical device that you connect to a virtual network gateway in Azure. 但在 Azure Stack Hub 中,连接的两端都是虚拟网关。However, in Azure Stack Hub both ends of the connection are virtual network gateways.

更通俗的解释是,存在本地网络网关资源往往意味着在连接的另一端存在远程网关。A more generic description is that the local network gateway resource always indicates the remote gateway at the other end of the connection.

创建本地网关资源Create the local network gateway resource

  1. 登录到 Azure Stack Hub 门户。Sign in to the Azure Stack Hub portal.

  2. 在用户门户中,选择“+ 创建资源”。In the user portal, select + Create a resource.

  3. 转到市场,然后选择“网络”。Go to Marketplace, and then select Networking.

  4. 从资源列表中选择“本地网络网关”。From the list of resources, select local network gateway.

  5. 在“名称”字段中,键入 Azure-GWIn the Name field, type Azure-GW.

  6. 在“IP 地址”字段中,键入 Azure Azure-GW-PiP 中的虚拟网关公共 IP 地址。In the IP address field, type the public IP address for the virtual network gateway in Azure Azure-GW-PiP. 此地址已显示在前面的网络配置表中。This address appears earlier in the network configuration table.

  7. 在“地址空间”字段中键入 10.100.0.0/2410.100.1.0/24,用作创建的 Azure VNET 的地址空间。In the Address Space field, for the address space of the Azure VNET that you created, type 10.100.0.0/24 and 10.100.1.0/24.

  8. 确认“订阅”、“资源组”和“位置”值正确无误,然后选择“创建”。 Verify that your Subscription, Resource Group, and location values are correct, and then select Create.

创建连接Create the connection

  1. 在用户门户中,选择“+ 创建资源”。In the user portal, select + Create a resource.

  2. 转到市场,然后选择“网络”。Go to Marketplace, and then select Networking.

  3. 从资源列表中选择“连接”。From the list of resources, select Connection.

  4. 在“基本”设置部分,针对“连接类型”选择“站点到站点(IPSec)”。 On the Basics settings section, for the Connection type, select Site-to-site (IPSec).

  5. 选择“订阅”、“资源组”和“位置”,然后选择“确定”。 Select the Subscription, Resource Group, and Location, and then select OK.

  6. 在“设置”部分,依次选择“虚拟网络网关”、“Azs-GW”。 On the Settings section, select Virtual network gateway, and then select Azs-GW.

  7. 依次选择“本地网络网关”、“Azure-GW”。 Select Local network gateway, and then select Azure-GW.

  8. 在“连接名称”中,键入 Azs-AzureIn Connection Name, type Azs-Azure.

  9. 在“共享密钥(PSK)”中键入 12345,然后选择“确定”。 In Shared key (PSK), type 12345, and then select OK.

  10. 在“摘要”部分,选择“确定”。 On the Summary section, select OK.

创建 VMCreate a VM

若要检查 VPN 连接,请创建两个 VM:一个在 Azure 中,一个在 Azure Stack Hub 中。To check the VPN connection, create two VMs: one in Azure, and one in Azure Stack Hub. 创建这些 VM 以后,即可使用它们通过 VPN 隧道发送和接收数据。After you create these VMs, you can use them to send and receive data through the VPN tunnel.

  1. 在 Azure 门户中,选择“+ 创建资源”。In the Azure portal, select + Create a resource.

  2. 转到“市场”,选择“计算”。 Go to Marketplace, and then select Compute.

  3. 在 VM 映像列表中,选择“Windows Server 2016 Datacenter Eval”映像。In the list of VM images, select the Windows Server 2016 Datacenter Eval image.

  4. 在“基本”部分的“名称”中,键入 Azs-VMOn the Basics section, in Name, type Azs-VM.

  5. 键入有效的用户名和密码。Type a valid username and password. 创建 VM 之后,将使用此帐户来登录 VM。You use this account to sign in to the VM after it's created.

  6. 提供“订阅”、“资源组”和“位置”,并选择“确定”。 Provide a Subscription, Resource Group, and Location, and then select OK.

  7. 在“大小”部分,为此实例选择一种 VM 大小,然后选择“选择”。 On the Size section, for this instance, select a VM size, and then select Select.

  8. 在“设置”部分接受默认值。On the Settings section, accept the defaults. 务必选择 Azs-VNet 虚拟网络。Make sure that the Azs-VNet virtual network is selected. 确认子网已设置为 10.1.0.0/24Verify that the subnet is set to 10.1.0.0/24. 然后选择“确定”。Then select OK.

  9. 在“摘要”部分中,查看设置并选择“确定” 。On the Summary section, review the settings, and then select OK.

测试连接Test the connection

建立站点到站点连接以后,应验证数据是否可以往两个方向流动。After the site-to-site connection is established, you should verify that you can get data flowing in both directions. 若要测试连接,最容易的方式是进行 ping 测试:The easiest way to test the connection is by doing a ping test:

  • 登录到在 Azure Stack Hub 中创建的 VM,然后 ping Azure 中的 VM。Sign in to the VM you created in Azure Stack Hub and ping the VM in Azure.
  • 登录到在 Azure 中创建的 VM,然后 ping Azure Stack Hub 中的 VM。Sign in to the VM you created in Azure and ping the VM in Azure Stack Hub.

备注

为了确保发送的流量通过站点到站点连接,必须 ping 远程子网上 VM 的直接 IP (DIP) 地址,而不是 VIP。To make sure that you're sending traffic through the site-to-site connection, ping the Direct IP (DIP) address of the VM on the remote subnet, not the VIP.

登录到 Azure Stack Hub 中的用户 VMSign in to the user VM in Azure Stack Hub

  1. 登录到 Azure Stack Hub 门户。Sign in to the Azure Stack Hub portal.

  2. 从左侧导航栏中选择“虚拟机”。In the left navigation bar, select Virtual Machines.

  3. 在 VM 列表中,找到前面创建的 Azs-VM,并选择它。In the list of VMs, find Azs-VM that you created previously, and then select it.

  4. 在 VM 部分选择“连接”,然后打开 Azs-VM.rdp 文件。On the section for the VM, select Connect, and then open the Azs-VM.rdp file.

    “连接”按钮

  5. 使用创建 VM 时所配置的帐户登录。Sign in with the account that you configured when you created the VM.

  6. 打开提升的 Windows PowerShell 提示符。Open an elevated Windows PowerShell prompt.

  7. 键入 ipconfig /allType ipconfig /all.

  8. 在输出中找到“IPv4 地址”,然后保存该地址供稍后使用。In the output, find the IPv4 Address, and then save the address for later use. 这是要从 Azure ping 的地址。This is the address that you ping from Azure. 在示例环境中,该地址为 10.1.0.4,但用户环境中的该地址可能有所不同。In the example environment, the address is 10.1.0.4, but in your environment it might be different. 该地址应在此前创建的 10.1.0.0/24 子网范围内。It should fall within the 10.1.0.0/24 subnet that you created previously.

  9. 若要创建允许 VM 响应 ping 的防火墙规则,请运行以下 PowerShell 命令:To create a firewall rule that allows the VM to respond to pings, run the following PowerShell command:

    New-NetFirewallRule `
     -DisplayName "Allow ICMPv4-In" `
     -Protocol ICMPv4
    

登录到 Azure 中的租户 VMSign in to the tenant VM in Azure

  1. 登录到 Azure 门户。Sign in to the Azure portal.

  2. 从左侧导航栏中选择“虚拟机”。In the left navigation bar, select Virtual Machines.

  3. 从 VM 列表中找到前面创建的 Azure-VM,并选择它。From the list of VMs, find Azure-VM that you created previously, and then select it.

  4. 在 VM 部分选择“连接”。On the section for the VM, select Connect.

  5. 使用创建 VM 时所配置的帐户登录。Sign in with the account that you configured when you created the VM.

  6. 打开权限提升的 Windows PowerShell 窗口。Open an elevated Windows PowerShell window.

  7. 键入 ipconfig /allType ipconfig /all.

  8. 应会看到 IPv4 地址位于 10.100.0.0/24 范围内。You should see an IPv4 address that falls within 10.100.0.0/24. 在示例环境中,该地址为 10.100.0.4,但你的地址可能有所不同。In the example environment, the address is 10.100.0.4, but your address might be different.

  9. 若要创建允许 VM 响应 ping 的防火墙规则,请运行以下 PowerShell 命令:To create a firewall rule that allows the VM to respond to pings, run the following PowerShell command:

    New-NetFirewallRule `
     -DisplayName "Allow ICMPv4-In" `
     -Protocol ICMPv4
    
  10. 在 Azure 上的 VM 中,通过隧道 ping Azure Stack Hub 中的 VM。From the VM in Azure, ping the VM in Azure Stack Hub, through the tunnel. 为此,请 ping 从 Azs-VM 中记录的 DIP。To do this, you ping the DIP that you recorded from Azs-VM. 在示例环境中,该地址为 10.1.0.4,但请确保 ping 实验室中记下的地址。In the example environment, this is 10.1.0.4, but be sure to ping the address you noted in your lab. 会看到以下屏幕捕获所示的结果:You should see a result that looks like the following screen capture:

    ping 成功

  11. 获得远程 VM 的答复表示测试成功。A reply from the remote VM indicates a successful test. 此时可关闭“VM”窗口。You can close the VM window.

还应执行更严格的数据传输测试(例如,朝两个方向复制不同大小的文件)。You should also do more rigorous data transfer testing (for example, copying differently-sized files in both directions).

通过网关连接查看数据传输统计信息Viewing data transfer statistics through the gateway connection

若要了解通过站点到站点连接传送的数据量,可在“连接”部分查看该信息。If you want to know how much data passes through your site-to-site connection, this information is available in the Connection section. 也可利用此测试来验证刚发送的 ping 是否确实通过了 VPN 连接。This test is also another way to verify the ping you just sent actually went through the VPN connection.

  1. 在已登录到 Azure Stack Hub 中用户 VM 的情况下,使用用户帐户登录到用户门户。While signed in to the user VM in Azure Stack Hub, use your user account to sign in to the user portal.

  2. 转到“所有资源”,选择“Azs-Azure”连接。 Go to All resources, and then select the Azs-Azure connection. 此时会显示“连接”。Connections appears.

  3. “连接”部分显示了“传入数据”和“传出数据”的统计信息。 On the Connection section, the statistics for Data in and Data out appear. 在以下屏幕捕获中,较大的数字是附加的文件传输造成的。In the following screen capture, the large numbers are attributed to additional file transfer. 应会看到其中有一些非零值。You should see some nonzero values there.

    传入和传出数据

后续步骤Next steps