Unable to ping peered resource

Ibrahim Shaikh 20

I have deployed hub and spoke model, having one hub Vnet and one spoke Vnet through which connectivity is going good, but recently deployed and configured new Vnet with different address space and deployed one VM in it. I also did peering between new Vnet and hub Vnet and the peering status is showing connected, apart from this I have configured NSG rule for both the VM, but if I try to ping or connect from spoke1 VM to spoke2 VM I am unable to ping or connect.

Help to find resolution.

KapilAnanth-MSFT 40,911 Reputation points Microsoft Employee

2024-07-17T08:51:41.08+00:00
@Ibrahim Shaikh ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I see Tushar Kumar had addressed your queries.

See : Azure VNET Peering FAQ

If you are looking for this functionality, then I suggest you use

Azure Firewall as NVA

Refer : Spokes communicating over a network appliance

How to : https://techcommunity.microsoft.com/t5/fasttrack-for-azure/using-azure-firewall-as-a-network-virtual-appliance-nva/ba-p/1972934

or Go for a vWAN : https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-global-transit-network-architecture#vnet-to-vnet-secured-transit-e

Thanks,

Kapil

Please Accept an answer if correct.

Original posters help the community find answers faster by identifying the correct answer.

Accepted answer

Tushar Kumar 3,231 Reputation points MVP

2024-07-16T22:04:53.4233333+00:00

Hi Ibrahim,

VNet Peering is not Transitive so If you Peer Network A to Network B and Network C , you can't connect from B to C.

Take a look at this question: https://learn.microsoft.com/en-us/answers/questions/1333557/why-vnet-peering-is-not-transitive-in-azure

Please Click "Accept as answer" if this helps
Please sign in to rate this answer.

1 person found this answer helpful.
Ibrahim Shaikh 20 Reputation points

2024-07-17T18:00:23.0466667+00:00

I want to establish connection between B and C then what should be done?

Tushar Kumar 3,231 Reputation points MVP

2024-07-17T18:48:42.58+00:00

You have multiple options as Kapil has mentioned in his comment. If it's just for test purpose I'll say you can peer B to C (easiest way). But that will break the purpose of Hub Spoke it will be Mesh connection. Quoting part from Kapil's Comment : If you are looking for this functionality, then I suggest you use

Azure Firewall as NVA

Refer : Spokes communicating over a network appliance

How to : https://techcommunity.microsoft.com/t5/fasttrack-for-azure/using-azure-firewall-as-a-network-virtual-appliance-nva/ba-p/1972934

or Go for a vWAN : https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-global-transit-network-architecture#vnet-to-vnet-secured-transit-e
Sign in to comment

Share via

Unable to ping peered resource

0 additional answers