Skip to content
cccskills
FreePublished on GitHub

azure-virtual-network-manager

Expert knowledge for Azure Virtual Network Manager development including troubleshooting, best practices, architecture & design patterns, limits & quotas, security, and configuration. Use when managing AVNM network groups/topologies, IPAM pools, connectivity hubs, UDRs, or security admin rules, and other Azure Virtual Network Manager related development tasks. Not for Azure Virtual Network (use azure-virtual-network), Azure Virtual WAN (use azure-virtual-wan), Azure Networking (use azure-networking), Azure Network Watcher (use azure-network-watcher).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills
Works withAzure
See how to install

Files included (1)

  • SKILL.md9.3 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Azure Virtual Network Manager Skill

This skill provides expert guidance for Azure Virtual Network Manager. Covers troubleshooting, best practices, architecture & design patterns, limits & quotas, security, and configuration. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL34-L39Diagnosing and fixing common Azure Virtual Network Manager issues, including policy deployment, connectivity, and verifying that network configurations are correctly applied.
Best PracticesL40-L45Deploying and updating AVNM configurations safely, and step-by-step guidance/checklists for cleanly removing or decommissioning AVNM components without breaking networks
Architecture & Design PatternsL46-L52Designing AVNM network topologies, IP address planning with IPAM, and automating user-defined route (UDR) creation and management across multiple hub-and-spoke environments
Limits & QuotasL53-L57Limits, quotas, and scale caps for Azure Virtual Network Manager resources (network groups, configurations, deployments), including supported scenarios and known feature limitations.
SecurityL58-L72Designing, simulating, and enforcing AVNM security admin rules (using network groups) to protect ports, block RDP/web traffic, and secure hub-and-spoke VNets with Azure Firewall and IPAM.
ConfigurationL73-L92Configuring AVNM: set up network groups/topologies, IPAM pools and cross-tenant IPAM, connectivity hubs, UDRs, logging, verification, and deploy via portal, CLI, PowerShell, ARM/Bicep.

Troubleshooting

TopicURL
Troubleshoot common Azure Virtual Network Manager issueshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/common-issues
Verify and troubleshoot AVNM applied configurationshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-view-applied-configurations

Best Practices

TopicURL
Manage Azure Virtual Network Manager configuration deploymentshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-deployments
Checklist for safely removing AVNM componentshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-remove-components-checklist

Architecture & Design Patterns

TopicURL
Plan and manage IP addresses with AVNM IPAMhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-ip-address-management
Automate user-defined route management with AVNMhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-user-defined-route
Manage UDRs across multiple AVNM hub-and-spoke topologieshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-manage-user-defined-routes-multiple-hub-spoke-topologies

Limits & Quotas

TopicURL
Review Azure Virtual Network Manager limitations and capshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-limitations

Security

TopicURL
Enforce AVNM security policies with security admin ruleshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-enforcement
Use AVNM network groups in security admin ruleshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admin-rules-network-group
Use security admin rules in Azure Virtual Network Managerhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admins
Protect high-risk ports using AVNM Security Admin Ruleshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-high-risk-ports
Block inbound RDP traffic with AVNM security admin ruleshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-portal
Block outbound web traffic with AVNM security ruleshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-block-network-traffic-powershell
Create AVNM security admin rules using network groupshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-security-admin-rule-network-group
Deploy AVNM hub-and-spoke topology with Azure Firewallhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-deploy-hub-spoke-topology-with-azure-firewall
Simulate Azure Virtual Network Manager security admin ruleshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-simulate-security-admin-rules
Prevent overlapping VNet address spaces with Azure Policy and AVNM IPAMhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/prevent-overlapping-ip-address-space-policy-ipam
Build and secure AVNM hub-and-spoke networkshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/tutorial-create-secured-hub-and-spoke

Configuration

TopicURL
Automate VNet creation using AVNM IPAM pools with PowerShellhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/automate-ip-address-management-ipam-sample
Configure AVNM network groups with Azure Policyhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-azure-policy-integration
Configure Virtual WAN hubs as AVNM connectivity hubshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/configure-virtual-wan-hub-for-network-manager
Create AVNM mesh topology using Bicep moduleshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/create-virtual-network-manager-bicep
Deploy AVNM network topologies with ARM templateshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/create-virtual-network-manager-template
Set up cross-tenant IPAM with Azure Virtual Network Managerhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/deploy-cross-tenant-ip-address-management
Deploy AVNM IPAM pools and CIDRs using Bicephttps://learn.microsoft.com/en-us/azure/virtual-network-manager/deploy-ip-address-management-pools-bicep
Configure AVNM cross-tenant connections with Azure CLIhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-cli
Configure cross-tenant connections in AVNM via portalhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-cross-tenant-portal
Configure Azure Virtual Network Manager event logshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-configure-event-logs
Create AVNM user-defined routes in Azure portalhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-create-user-defined-route
Define dynamic AVNM network groups using Azure Policyhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-define-network-group-membership-azure-policy
Use IPAM pool association recommendations for AVNM VNetshttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-ip-address-management-association-recommendations
Configure IPAM pools and CIDR management in AVNMhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-manage-ip-addresses-network-manager
Use network verifier to analyze VM reachability in AVNMhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/how-to-verify-reachability-with-virtual-network-verifier
Query Azure Virtual Network Manager with Azure Resource Graphhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/query-azure-resource-graph
Use ARM template samples for Azure Virtual Network Managerhttps://learn.microsoft.com/en-us/azure/virtual-network-manager/resource-manager-template-samples

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

azure-active-directory-b2c

Free

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 18, 2026

azure-advisor

Free

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Advisor alerts/digests, managing rec states, using workbooks, Resource Graph, or RBAC for access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 18, 2026

azure-ai-vision

Free

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 18, 2026

azure-aks-edge-essentials

Free

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when managing AKS Edge/Hybrid with Arc, GitOps, IoT/OPC/ONVIF, TPM/Key Vault secrets, or AI model workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 18, 2026

azure-analysis-services

Free

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 18, 2026

azure-anomaly-detector

Free

Expert knowledge for Azure AI Anomaly Detector development including troubleshooting, best practices, limits & quotas, configuration, and deployment. Use when tuning Docker-based Anomaly Detector, ACI or IoT Edge deployments, univariate/multivariate APIs, or service limits, and other Azure AI Anomaly Detector related development tasks. Not for Azure AI Metrics Advisor (use azure-metrics-advisor), Azure Monitor (use azure-monitor), Azure Machine Learning (use azure-machine-learning).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills786Updated Oct 18, 2026

See all skills by MicrosoftDocs

Report a problem with this skill