Azure Getting Started Guide


The Aviatrix cloud network solution consists of two components, the Controller and Gateways, both of which are Azure VMs (Virtual Machines). Gateways are launched from the Controller console to specific VNets. This guide helps you launch the Controller VM in Azure.

Launching a new Controller, or migrating Controller images, requires two offers from the Azure Marketplace:

  1. Aviatrix Secure Networking Platform Metered 2208-Universal 24x7 Support

  2. Aviatrix Secure Networking Platform BYOL (Bring Your Own License)

Both offers are required. Subscribe to the metered offer to receive your Customer ID, and then subscribe to the BYOL offer to deploy your Controller using that Customer ID. You will only be billed for the metered offer.

Complete the following instructions:

These instructions apply generally to both Azure commercial and Azure Government clouds for deploying an Aviatrix Controller. Note that some screenshots may show regions that are only available for commercial Azure accounts. Commercial Azure offers multiple regions worldwide while Azure Government offers four US regions: (US) USGov Virginia, (US) UsGov Arizona, (US) UsGov Iowa, and (US) UsGov.

For more information about Azure regions, click here.

Subscribing to the Aviatrix Metered Offer

You must subscribe to the Aviatrix metered offer before subscribing to the BYOL offer.

With the Aviatrix Metered License, you are billed monthly. No upfront cost and pay as you go.
  1. Go to the Azure Marketplace to subscribe to the Aviatrix Secure Networking Platform Metered 2208-Universal 24x7 Support offer.

  2. Click Get it Now on the left side of the page.

  3. Mark the permissions checkbox and click Continue.

  4. Click Subscribe.

  5. Enter your Subscription name, Resource group, Name, and Recurring billing preference. Then, click Review + subscribe.

  6. Click Subscribe.

  7. After the subscription process completes, click Configure account now.

    It might take several seconds before the configuration button becomes active.

  8. Enter your email address in the Email field and click Submit.

You receive an email from with the subject line "License key for Aviatrix Metered Controller and CoPilot." This email contains your Controller customer ID, Copilot customer ID, and offer subscription ID. Save these values in a secure place to use later for onboarding.

You can click the link in this email to open the Azure Marketplace to the Aviatrix Secure Networking Platform BYOL (Bring Your Own License) page to continue with the subscription process.

Subscribing to the Aviatrix Controller BYOL Offer

After subscribing to the metered offer and receiving your license key, you must subscribe to the Aviatrix BYOL offer. The BYOL offer activates the metered subscription.

  1. Go to the Azure Marketplace to subscribe to the Aviatrix Secure Networking Platform BYOL offer.

    You can also access the marketplace from the link in the email you received after subscribing to the metered offer.

  2. Click Create.

  3. On the Basics tab, do the following:

    • Create a new Resource Group titled "aviatrix."

    • Name the virtual machine. Example: "aviatrixController."

    • For the instance size, at least 8GB of RAM is recommended (the B2ms instance size should be sufficient).

    • Select an authentication type.

    • Enter a username.

      Do not use "ubuntu" as username if you use password as the authentication type.

    • If you selected the password authentication type, enter a password.

      Azure - Create a Virtual Machine
  4. On the Disks tab, you can accept the defaults or enter your choices.

  5. On the Networking tab:

    • A default subnet and security group are preconfigured. You can accept the defaults.

    • For Public IP, click Create New.

    • At Assignment, select Static and click OK.


      Keep each Controller Security Group’s outbound rules at their default, open to Internet or All, to avoid blocking your Controller’s IP address from accessing the Internet.

  6. You can accept the defaults settings or modify the settings, as needed, on the Management, Monitoring, Advanced, and Tags tabs. No configuration changes are required.

  7. When you are finished making all of your selections, click Review + subscribe.

    After several seconds, the Create button becomes active.

  8. Click Create.

  9. If you selected the option to use an SSH public key for authentication, the Generate new key pair window displays. Click Download private key and create resource.

    Resource creation takes several seconds.

    The private key is not stored by Azure or Aviatrix. This is the only opportunity to download the key. Keep the key in a safe place in case you need it in the future.
  10. When a message displays indicating the deployment is complete, click Go to resource to see resource details.

  11. Find the VM’s public IP address, as shown below:

  12. Use a browser to access the Controller VM. In this example, it is

  13. At the login page, enter "admin" as the username.The initial password is the internal IP address of the VM.

  14. Log into your new Controller.

  15. After logging in, click on the Onboarding tab.

Any resources created by the Controller, such as Aviatrix gateways, Azure routing entries, subnets, etc., must be deleted from the Controller console. If you delete them directly on Azure console, the Controller’s view of the resources will be incorrect, which will lead to features not working properly.

Onboarding your Azure Account in the Aviatrix Controller

Onboarding helps you set up an account on the Aviatrix Controller that corresponds to an Azure account with policies so that the Controller can launch gateways using Azure APIs.

Follow the Azure Accounts document to create an Aviatrix account that corresponds to your Azure account credential.

  • You can create a single Aviatrix account that corresponds to AWS, Azure, and Google Cloud account credentials.This is a multicloud platform.

  • For information about how to subscribe to an Aviatrix License if you subscribe to a trial license and it expires, see Aviatrix Licensing.