Not able to connect to VM using Bastion service

sns 9,241

I have configured the Baston service, but it is not giving not connecting once I click on connect, here is the error. Please suggest. Thank you

KapilAnanth-MSFT 48,081 Reputation points Microsoft Employee

2023-01-02T08:35:24.993+00:00
Hi @sns ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you are not able to access your VM from Azure Bastion.

Kindly let us know the following.

Make sure the VM is on Running state

Is this a windows VM or a Linux VM

Can you assign a public IP to the VM, allow NSG and try to access the VM.

Can you access the VM from another VM in the same subnet using it's private IP?

Can you use this Bastion and access a different VM in the same subnet?

Make sure you are allowing IP ranges from Bastion subnet in the destination VM's NSG.

Let me know if you have any further queries on this

Cheers,
Kapil
sns 9,241 Reputation points

2023-01-02T08:59:45.337+00:00

Hi Kapil,

Thank you for the response. I have verified options you have suggested.

Make sure the VM is on Running state
Ans: Yes VM is in running state only, when it is running only I am testing.

Is this a windows VM or a Linux VM
Ans: It is windows VM

Can you assign a public IP to the VM, allow NSG and try to access the VM.
Ans: I can access using public IP to VM. I can do using normal RDP

Can you access the VM from another VM in the same subnet using it's private IP?
Ans: Yes I can access other VM with private IP from another VM in the same subnet

Can you use this Bastion and access a different VM in the same subnet?
Ans: same issue for other VM also

Make sure you are allowing IP ranges from Bastion subnet in the destination VM's NSG.
Ans: How to do this? Please suggest.
KapilAnanth-MSFT 48,081 Reputation points Microsoft Employee

2023-01-02T09:08:11.807+00:00
Hi @sns ,

Refer : Bastion NSG Requirements

Also, in your Screenshot, I see you are using SSH for a windows VM (Port 22)

Can you try with RDP (Port 3389) ?

Cheers,
Kapil
sns 9,241 Reputation points

2023-01-02T09:54:29.54+00:00

Hi Kapil,

I changed port to 3389. But still the same error
KapilAnanth-MSFT 48,081 Reputation points Microsoft Employee

2023-01-02T14:09:12.877+00:00
Hi @sns ,

This means, either the Bastion is in failed state or the NSGs in Bastion/VM's subnet is blocking the traffic.

Kindly check the provisioning state of the Bastion resource and make sure it's in succeeded state.

Also, can you please check the NSG of the VM and the Bastion subnet?

Make sure the NSG allows the subnet range of Bastion

You can share the NSG screenshots of the VM and the Bastion subnet

From the Connection Troubleshoot, use the source as one of the IP from the Bastion Range and see if it works?

Cheers,
Kapil.
sns 9,241 Reputation points

2023-01-02T14:57:42.127+00:00

Hi Kapil,

Provisioning state is success. But still the same issue

VM NSG screenshot:

Bastion service screenshot:

Baisten Subnet:
KapilAnanth-MSFT 48,081 Reputation points Microsoft Employee

2023-01-05T05:32:37.65+00:00

Hi @sns ,

To troubleshoot the exact issue, I think we will need a specialized 1:1 session, where a support engineer can have a screen share session to pinpoint the issue. If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

Cheers,
Kapil

2 answers

Takahito Iwasa 4,851 Reputation points MVP

2023-01-02T02:11:25.387+00:00

Hi, @sns

You can disgnose network connectivity issues to your virtual machine using Azure Network Watcher.

You can troubleshoot your connectivity issues by navigating to the Connection Troubleshoot tab (in the Monitoring section) of your Azure Bastion resource in the Azure portal. Network Watcher Connection Troubleshoot provides the capability to check a direct TCP connection from a virtual machine (VM) to a VM, fully qualified domain name (FQDN), URI, or IPv4 address. To start, choose a source to start the connection from, and the destination you wish to connect to and select "Check".

https://zcusa.951200.xyz/en-us/azure/bastion/troubleshoot
Please sign in to rate this answer.
sns 9,241 Reputation points

2023-01-02T09:02:19.853+00:00

Hi Takahitolwasa,

Here is the error again.

and when I checked from connection troubleshoot here is the error
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Prithivi Rajan 0 Reputation points

2024-12-12T14:43:38.2633333+00:00

I have deployed a Bastion Host with the Premium SKU in Azure, but I'm unable to connect to a VM that only has a private IP. What could be causing this issue?
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Not able to connect to VM using Bastion service

2 answers

Your answer