Allowing IoT Edge to connect with IoT Hub using Private End point

Satyam Chauhan 492

Hi,
I want to setup a private end point on IoT hub to restrict access to IoT Hub.
I have to send data from an on-premise RHEL VM having IoT Edge Installed to IoT Hub, which will be on different virtual network.
Is there a way to configure this in IoT Hub.

Thanks.

AshokPeddakotla-MSFT 27,311 Reputation points

2022-12-06T14:12:31.263+00:00

@Satyam Chauhan Wanted to follow up with you to understand whether the below information helped. Please let us know if there are any other queries.
If below suggestions answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further queries do let us know.

1 answer

chbeier 1,866 Reputation points

2022-11-30T15:58:45.033+00:00

Hello @Satyam Chauhan ,

As described in documentation on IoT Hub virtual-network-support, your Edge devices need VPN or ExpressRoute to access the VNET and the private endpoint of the IoT Hub.

----------

If your question was answered, please use "Accept Answer". If not, please share more details so we can try to help you.
Please sign in to rate this answer.

2 people found this answer helpful.
Satyam Chauhan 492 Reputation points

2022-12-01T14:12:55.507+00:00

Hi @chbeier ,
Thank you for answering,

Just wanted to check if we can provide any inbound/outbound port rule in IoT Hub endpoint to allow only the IoT Edge.

Thanks

chbeier 1,866 Reputation points

2022-12-01T16:09:46.733+00:00

You can deactivate the public endpoint and also use the IP filter to limit only access to the IP addresses of your IoT Device in the network

Satyam Chauhan 492 Reputation points

2022-12-02T10:48:33.44+00:00

Hi @chbeier ,
Thanks for answering,

We want to do the same thing from private end point. Let me know if we can do it from private end point.

chbeier 1,866 Reputation points

2022-12-02T12:31:24.277+00:00

The IP filtering works only for the public endpoint of IoT Hub.
In the following scenario, you would need to allow only the devices on-premises to access the VPN / Express Route to the subnet with the private endpoint to prevent the workstations from access.
Sign in to comment