Package: azure-cli-network
Microsoft Azure CLI ‘network’ Command ModuleThis package is for the ‘network’ module.
i.e. ‘az network’Release History2.5.2Added commandlist-service-tags.dns zone import: Fix issue where users could not import wildcard A records.watcher flow-log configure: Fixed issue where flow logging could not be enabled in certain regions.2.5.1application-gateway: Addedwaf-policycommands to support custom WAF rules.application-gateway create/update: Added–waf-policyand–max-capacityarguments.2.5.0[BREAKING CHANGE]: previously deprecated command groupnetwork interface-endpointshas been removed. Usenetwork private-endpointsinstead.network vnet subnet create/update: Added–nat-gatewayargument for attaching to a NAT gateway.dns zone import: Fix issue where record names could not match a record type.2.4.0[BREAKING CHANGE]vnet create/update: Replaced–cachearugment with–defer.2.3.7dns zone create: Add auto name server delegation in parent during child zone creation2.3.6vnet-gateway list-bgp-peer-status: Fix table format not displaying.application-gateway rewrite-rule: Addlist-request-headersandlist-response-headerscommands.application-gateway rewrite-rule condition: Addlist-server-variablescommand.express-route port update: Fixed an issue where updating link state on an express-route port would throw an unknown attribute exception.2.3.5application-gateway: Addrewrite-rulecommand group.2.3.4vpn-connection update: Fix issue where updating a VPN connection between gateways in different subscriptions would fail.2.3.3vpn-connection create/update: Add–express-route-gateway-bypassargument.express-route: Port command groups fromexpress-routeextensions.express-route: Addedexpress-route gatewayandexpress-route portcommand groups.express-route peering create/update: Added argument–legacy-mode.express-route create/update: Added argument–allow-classic-operationsand–express-route-port.vnet-gateway create/update: Add–gateway-default-siteargument.vnet-gateway: Addedipsec-policycommands.2.3.2dns zone export: Ensure exported CNAMEs are FQDNs.nic ip-config address-pool add/remove: Add–gateway-nameto support application gateway backend address pools.network watcher flow-log configure: Add arguments–traffic-analytics,–workspaceto support traffic analytics through a Log Analytics workspace.lb inbound-nat-pool create/update: Add arguments–idle-timeout,–floating-ip.2.3.1express-route update: Fix issue where–bandwidthargument was ignored.ddos-protection update: Fix issue with set comprehension causing stack trace.2.3.0traffic-manager profile create/update: Add support for–custom-headersand–status-code-ranges. Add support for new routing types: Subnet and Multivalue.traffic-manager endpoint create/update: Add support for–custom-headersand–subnets.ddos-protection update: Fix issue where supplying–vnets “”to remove vnets caused a strack trace.2.2.11watcher flow-log configure: Add support for–formatand–log-version.dns zone update: Finished issue where using “” to clear resolution and registration VNets didn’t work.2.2.10application-gateway waf-config set: Added–exclusionargument to support WAF exclusions.2.2.9application-gateway: Addedroot-certsubcommands to handle trusted root certifcates.application-gateway create/update:Added–min-capacityfor configuring autoscale on v2 app gateways.
Added–custom-error-pagesfor configuring custom error pages.application-gateway create: Added–zonesfor availability zone support.application-gateway waf-config set: Added arguments–file-upload-limit,–max-request-body-sizeand–request-body-check.2.2.8Deprecatednetwork interface-endpointcommand names in favor ofnetwork private-endpoint.express-route peering connection create: Fix issue where–peer-circuitwould not accept an ID.public-ip create: Fix issue where–ip-tagsdid not work correctly.2.2.7nic create- Add–app-gateway-address-poolsand–gateway-namearguments to support adding application
gateway backend address pools to a NIC.nic ip-config create/update- Add–app-gateway-address-poolsand–gateway-namearguments to support adding application
gateway backend address pools to a NIC.2.2.6Fixnetwork dns zone create. Command succeeds even if the user has configured a default location. See #6052.network vnet peering create: Deprecated–remote-vnet-id. Added –remote-vnet which accepts a name or ID.network vnet create: Added support for multiple subnet prefixes with–subnet-prefixes.network vnet subnet create/update: Added support for multiple subnet prefixes with–address-prefixes.network application-gateway create: Fixed logic that prevented creating gateways with WAF_v2 or Standard_v2 SKU.network vnet subnet update: Added–service-endpoint-policyconvenience argument.2.2.5Addnetwork public-ip prefixcommands to support public IP prefixes features.Addnetwork service-endpointcommands to support service endpoint policy features.Addnetwork lb outbound-rulecommands to support creation of Standard Load Balancer outbound rules.Add–public-ip-prefixtonetwork lb frontend-ip create/updateto support frontend IP configurations using public IP prefixes.Add–enable-tcp-resettonetwork lb rule/inbound-nat-rule/inbound-nat-pool create/update.Add–disable-outbound-snattonetwork lb rule create/update.Allownetwork watcher flow-log show/configureto be used with classic NSGs.Addnetwork watcher run-configuration-diagnosticcommand.Fixnetwork watcher test-connectivitycommand and add–method,–valid-status-codesand–headersproperties.network express-route create/update: Add–allow-global-reachflag.network vnet subnet create/update: Add support for–delegation.Addednetwork vnet subnet list-available-delegationscommand.network traffic-manager profile create/update: Added support for–interval,–timeoutand–max-failuresfor Monitor configuration.
Deprecated options–monitor-path,–monitor-portand–monitor-protocolin favor of–path,–port,–protocol.network lb frontend-ip create/update: Fixed the logic for setting private IP allocation method. If a private IP address is provided, the
allocation will be static. If no private IP address is provided, or empty string is provided for private IP address, allocation is dynamic.dns record-set * create/update: Add support for–target-resource.Addnetwork interface-endpointcommands to query interface endpoint objects.Addnetwork profile show/list/deletefor partial management of network profiles.Addnetwork express-route peering connectioncommands to manage peering connections between ExpressRoutes.2.2.4network application-gateway ssl-policy predefined show: exception handling to exit with code 3 upon a missing resource for consistency2.2.3Minor fixes2.2.2dns: Added dns support to 2017-03-09-profile for Azure Stack2.2.1Minor fixes2.2.0BREAKING CHANGE: ‘show’ commands log error message and fail with exit code of 3 upon a missing resource.network nic create/update/delete: Add–no-waitsupport.Addednetwork nic wait.network vnet subnet list: Argument–idsis deprecated.network vnet peering list: Argument–idsis deprecated.network nsg rule list: Added–include-defaultflag to include default security rules in the output.2.1.5network dns zone import: Fix issue where record types were case-sensitive. [#6602](https://github.com/Azure/azure-cli/issues/6602)2.1.4network lb probe create: supportHttpsprotocol [#6571](https://github.com/Azure/azure-cli/issues/6571)network traffic-manager endpoint create/update: Fix issue where–endpoint-statuswas case sensitive. [#6502](https://github.com/Azure/azure-cli/issues/6502)2.1.3network vnet peering: a few improvements2.1.2network watcher show-topology: Fix issue where command would not work with vnet and/or subnet name. [#6326](https://github.com/Azure/azure-cli/issues/6326)2.1.1network watcher: Fix issue where certain commands would claim Network Watcher is not enabled for regions when it actually is. [#6264](https://github.com/Azure/azure-cli/issues/6264)2.1.0BREAKING CHANGE:express-route auth list,express-route peering list,nic ip-config listnsg rule list,route-filter rule list,route-table route list,traffic-manager endpoint list: Removed the–idsparameter.2.0.28application-gateway create: Fix issue where tags could not be set. [#5936](https://github.com/Azure/azure-cli/issues/5936)application-gateway http-settings create/update: Add convenience argument–auth-certsto attach authentication certificates. [#4910](https://github.com/Azure/azure-cli/issues/4910)ddos-protection: Added new commands to create DDoS protection plans .vnet create/update: Added support for–ddos-protection-planto associate a VNet to a DDoS protection plan.network route-table create/update: Fix issue with–disable-bgp-route-propagationflag.network lb create/update: Removed dummy arguments–public-ip-address-typeand–subnet-type.sdistis now compatible with wheel 0.31.02.0.27network dns zone import: Support for importing of TXT records with RFC 1035 escape sequences.network dns zone export: Support for exporting of TXT records with RFC 1035 escape sequences.network dns record-set txt add-record: Support for TXT records with RFC 1035 escape sequences.2.0.26network dns zone create/update: Adding support for Private DNS zones.2.0.25BREAKING CHANGE:route-filter rule create: The–tagsparameter is no longer supported.Support Autorest 3.0 based SDKsFix issues with update commands inexpress-route,nsg rule,public-ip,traffic manager profileandvnet-gatewaywhere some parameters erroneously had default values.network watcher: Addedconnection-monitorcommands.network watcher show-topology: Added support to target–vnetand–subnet.2.0.24network vnet-gateway vpn-client generate: Fix missing client issue.2.0.23network public-ip create: Fix–tagsoption.network lb create: Fix–tagsoption.network local-gateway create: Fix–tagsoption.network nic create: Fix–tagsoption.network vnet-gateway create: Fix–tagsoption.network vpn-connection create: Fix–tagsoption.2.0.22application-gateway create:–cert-passwordprotected using secureString.application-gateway update: Fix issue where–skuerroneously applied a default value.vpn-connection create:–shared-keyand–authorization-keyprotected using secureString.asg create: Fix missing client issue.dns zone export: Fix issue with exported names. Add–file-name/-fparameter.Fix issue where long TXT records were incorrectly exported.
Fix issue where quoted TXT records were incorrectly exported without escaped quotes.dns zone import: Fix issue where certain records were imported twice.Restoredvnet-gateway root-certandvnet-gateway revoked-certcommands.2.0.21vnet-gateway update: Fix issue when trying to change to/from active-standby mode.application-gateway create/update: Add support for HTTP2.2.0.20Update for CLI core changes.2.0.19route-table create/update: Add support for–disable-bgp-route-propagation.public-ip create/update: Add support for–ip-tags2.0.18dns: Add support for CAA records.traffic-manager profile update: Fix issue where profiles with endpoints could not be updated.vnet update: Fix issue where–dns-serversdidn’t work depending on how the VNET was created (ARM deployment).dns zone import: Fix issue where relative names were incorrectly imported.2.0.17minor fixes2.0.16 (2017-10-09)application-gateway address-pool create:–serverargument is not optional to allow creation of empty address pools.traffic-manager: Updates to support latest features.2.0.15 (2017-09-22)lb/public-ip: Add availability zone support.express-route: Add support for IPv6 Microsoft PeeringAddasgapplication security group commands.nic create: Added–application-security-groupssupport.nic ip-config create/update: Added–application-security-groupssupport.nsg rule create/update: Added–source-asgsand–destination-asgssupport.vnet create/update: Added–ddos-protectionand–vm-protectionsupport.Added command:vnet-gateway vpn-client show-url2.0.14 (2017-09-11)vnet-gateway: Added commandslist-bgp-peer-status,list-learned-routesandlist-advertised-routesvnet-gateway: Added commandvpn-client generate.2.0.13 (2017-08-28)BCvnet list-private-access-services: renamed tovnet list-endpoint-servicesBCvnet subnet create/update: renamed–private-access-servicesto–service-endpointsnsg rule create/update: Add support for multiple IP ranges and port ranges.lb create: Added support for SKU.public-ip create: Added support for SKU.2.0.12 (2017-08-11)lb: fixed issue where the certain child resource names did not resolve correctly when omittedapplication-gateway {subresource} delete: Fixed issue where–no-waitwas not honored.application-gateway http-settings update: Fix issue where–connection-draining-timeoutcould not be turned off.[Network] Fix error - unexpected keyword argument ‘sa_data_size_kilobyes’: Fix whereaz network vpn-connection ipsec-policy addunexpected keyword argument ‘sa_data_size_kilobyes’2.0.11 (2017-07-27)Addedlist-private-access-servicescommandvnet subnet create/update: Added–private-access-servicesargument.application-gateway redirect-config create: Fix issue where create command would fail. Fix issue where–no-waitwould not work with update command.application-gateway url-path-map rule create: Fix issue where certain parameters which should accept names or IDs
would only accept IDs.2.0.10 (2017-07-07)application-gateway address-pool create/update: fix bug when using the–serversargument.application-gateway: addredirect-configcommandsapplication-gateway ssl-policy: addlist-options,predefined listandpredefined showcommandsapplication-gateway ssl-policy set: new arguments–name,–cipher-suites,–min-protocol-versionapplication-gateway http-settings create/update: new arguments–host-name-from-backend-pool,–affinity-cookie-name,–enable-probe,–pathapplication-gateway url-path-map create/update: new arguments–default-redirect-config,–redirect-configapplication-gateway url-path-map rule create: new argument–redirect-configapplication-gateway url-path-map rule delete: add support for–no-waitapplication-gateway probe create/update: new arguments–host-name-from-http-settings,–min-servers,–match-body,–match-status-codesapplication-gateway rule create/update: new argument–redirect-config2.0.9 (2017-06-21)nic create/update: Add support for–accelerated-networking.BCnic create: Remove non-functional–internal-dns-name-suffixargument.2.0.8 (2017-06-13)nic update/create: Add support for –dns-servers.local-gateway create: fix bug where –local-address-prefixes was ignored.vnet update: Add support for –dns-servers.2.0.7 (2017-05-30)express-route peering create: fix bug when creating a peering without route filtering.express-route update: fix bug where –provider and –bandwidth arguments did not work.network watcher show-topology: Fix bug with location defaulting logic.network list-usages: improve output for TSV and table format.application-gateway http-listener create: Default frontend IP if only one exists.application-gateway rule create: Default address pool, HTTP settings, and HTTP listener ifonly one exists.lb rule create: Default frontend IP and backend pool if only one exists.lb inbound-nat-rule create: Default frontend IP if only one exists.2.0.6 (2017-05-09)Minor fixes.2.0.5 (2017-05-05)Addnetwork watcher test-connectivitycommand.Add support for–filtersparameter fornetwork watcher packet-capture create.2.0.4 (2017-04-28)Add support for Application Gateway connection draining.Add support for Application Gateway WAF rule set configuration.Add support for ExpressRoute route filters and rules.Add support for TrafficManager geographic routing.Add support for VPN connection policy-based traffic selectors.Add support for VPN connection IPSec policies.Fix bug withvpn-connection createwhen using the–no-waitor–validateparameters.2.0.3 (2017-04-17)Add support for active-active VNet gatewaysRemove nulls values from output ofnetwork vpn-connection list/showcommands.BC: Fix bug in the output ofvpn-connection createFix bug where ‘–key-length’ argument of ‘vpn-connection create’ was not parsed correctly.Fix bug indns zone importwhere records were not imported correctly.Fix bug wheretraffic-manager endpoint updatedid not work.Add ‘network watcher’ preview commands.2.0.2 (2017-04-03)[Network] Convert Load Balancer and App Gateway Create to Dynamic Templates (#2668)Fix format bug. (#2549)Add wait commands and –no-wait support (#2524)[KeyVault] Command fixes (#2474)2.0.1 (2017-03-13)Fix: ‘None’ already exists. Replacing values. (#2390)Convert network creates to use SDK (#2371)Convert PublicIP Create to use SDK (#2294)Convert VNet Create to use SDK (#2269)2.0.0 (2017-02-27)GA release.0.1.2rc2 (2017-02-22)Fix VPN connection create shared-key validator.Add delete confirmation for DNS record-set delete.Fix bug with local address prefixes.Documentation updates.0.1.2rc1 (2017-02-17)DNS/Application-Gateway FixesShow commands return empty string with exit code 0 for 404 responses (#2117)’DNS Zone Import/Export (#2040)Restructure DNS Commands (#2112)0.1.1b2 (2017-01-30)Table output for ‘network dns record-set list’.Prompt confirmation for ‘network dns zone delete’.Support Python 3.6.0.1.1b1 (2017-01-17)Breaking changesRenames –sku-name to –sku and removes the –sku-tier parameter. It is parsed from the SKU name.For the application-gateway {subresource} list commands, changes the alias for the application gateway name from –name/-n to –gateway-name.Renames vpn-gateway commands to vnet-gateway commands for consistency with the SDK, Powershell, and the VPN connection commands.Adds ‘name-or-id’ logic to vpn-connection create so that you can specify the appropriate resource name instead of only the ID. Renames the related arguments to omit -id.Removes –enable-bgp from the vnet-gateway create command.Improvements to ExpressRoute update commandsRouteTable/Route command updatesVPN connection fixesVNet Gateway Fixes and EnhancementsApplication Gateway Commands and FixesDNS FixesDNS Record Set Create UpdatesExpressRoute peering client-side validation0.1.0b11 (2016-12-12)Preview release.