bastion virtual network

Question

Hello,
I follow the link below to create bastion:

https://learn.microsoft.com/en-us/azure/bastion/bastion-create-host-portal

for Virtual network, here is the settings:
Address range
10.1.0.0/16
Subnets
10.1.0.0/24

for Subnet*, don't know what to write.
based on the documentation,
Subnet: The subnet in your virtual network where the new Bastion host will be deployed. The subnet will be dedicated to the Bastion host and must be named as AzureBastionSubnet. This subnet must be at least /27 or larger.

I used 10.1.0.0/24 or AzureBastionSubnet. it is not allowed.

what input is expected?

Answer 1

The subnet must be named "AzureBastionSubnet" (without the quotes).
The subnet ip configuration should be /27 or larger (/27, /26, /25, /24, ...)

Hope this helps.

Regards
Andreas Baumgarten

(Please don't forget to Accept as answer if the reply is helpful)

Answer 2

Andreas,
thanks so much for the help.
it works with your suggestion, bastion only accepts IP range 10.1.0/16, but the active directory domain ip falls in 10.0.2.0/24 rang, not sure if it will cause the problem to access from bastion to azure AD or not?