How to associate an existent Public IP with Azure Firewall

@Rodrigo Rosa ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Your requirement should be possible, directly via Portal.

I don't see any requirement of using script (Powershell/CLI) to achieve this.

Please note, Public IP Address Prefix as a "whole" resource cannot be attached to a Azure Firewall.

Nevertheless, you should be able to attach individual IPs from the Prefix to the Azure Firewall.

See :

• Public IP address prefix Scenarios
• 

In the Azure Firewall,

• First change the Public IP to use one of the IPs from the /30 Prefix
• See : Change the public IP address for a firewall
• Then add the rest of the 3 IP Addresses from the /30 Prefix as additional IP configurations
• See : Add a public IP configuration to a firewall

The only requirement is that

You can't update the IP address if the firewall's existing IP has any destination network address translation (DNAT) rules associated with it.

Make sure you do not have any DNAT rules or Delete them and then recreate them once you updated the IP Addresses.

Please let us know if we can be of any further assistance here.

Thanks,

Kapil

Please Accept an answer if correct.

Original posters help the community find answers faster by identifying the correct answer.

Hello Kapil,

I think my environment is different. As I said, the Firewall is part of a virtual hub and managed by the Firewall Manager.

In the portal, I have only the option (to specify the number of Public IPs to add). Azure will randomly create the IPs.

I cannot add an existing IP.

Thank you for the answer!

BR,

Unfortunately, as you found out, this is not supported with a Secured Hub in a VWAN, so the whole prefix concept goes out the window. Still on my ask list however together with NAT GW support etc.