Share via

Azure VM to VM communication

Dave 1 Reputation point
2019-11-27T13:39:38.817+00:00

Hello All,
Looking form some information and how-to

I would like to have my VMs on two different V-Nets be able to communicate with each other....
I know I can do peering between the V-Nets and that allows communication fine, and I have set that up between a couple of my V-Nets.
But I want to take a more secure approach to things, because I will have to lock things down in preparation for PCI testing.
So I have a machine sitting in East US and it's IP is 10.51.0.132
I set up another VM in East US 2 and it's IP is 10.54.0.4
I went in and added Inbound/Outbound rules on both of the NSG's associated with the two machines....allowed all ports and all protocols....so just wide open.
But I am not able to ping from one to the other.

Where am I messing up??
Thank you

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
8,036 questions

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Emerson Caro 86 Reputation points
    2019-12-18T04:19:23.81+00:00

    For that to happen, you need to do two things:

    1. Peer the two VNets together.
    2. Create an NSG rule that only allows those two VMs to communicate with each other; no other VMs should be able to communicate to the other VNet.

    On the rule, for PING (ICMP) to work, you need to also allow ICMP for the Virtual Machines to be able to ping each other.

    If it's still not working, if it's on Windows, try disabling the Windows Firewall as this may be blocking the ping request or create an exception by just enabling ping (ICMP).

    1 person found this answer helpful.
    0 comments
  2. Riku Pirttinokka 1 Reputation point
    2019-11-27T14:00:17.26+00:00

    You have to allow the ping request from the operation system also.
    https://www.thomasmaurer.ch/2019/09/how-to-enable-ping-icmp-echo-on-an-azure-vm/

  3. Ehfaz R 1 Reputation point
    2019-11-29T14:48:40.603+00:00

    Looks like everything has been configured at the network layer in Azure. However, what about the Windows firewall on both the machines? You have to open the respective ports, else if you need to configure admin access to-and-fro, you can disable the Windows firewall on both the machines (at least to test it out).

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.