not able to RDP to azure VM

Question

not able to RDP to azure VM

MyAzQuery 171

I created 2 VNets - VNet1 and VNet2
VNet1 is peering to VNet in hub network
VNet2 is not peered to any other network.

I created several azure Windows VMs on VNet1 , but i am not able to RDP to it. Even i checked that in my netowrk inbound port 3389 was open and in azure portal under my VM, i could test connectivity successfully , but still not able to connect

On the other hand, when i created Azure VM on the VNet2 , i was able to easily RDP without any problem.

Is this a Problem with the Vnet1 ? What is the possible cause of the issue ?

Please help

Andreas Baumgarten 122.3K Reputation points MVP Volunteer Moderator

2022-10-14T20:23:45.15+00:00

Hi @MyAzQuery ,

you are connecting to the VM in VNet2 via public IP?
How are you trying to connect to the VM in VNet1? Via Public IP?

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten
MyAzQuery 171 Reputation points

2022-10-15T17:48:26.187+00:00

yes via Public IP.

Is it possible that there is some firewall in the Hub Network , which is blocking INBOUND RDP 3389 access to the Azure VM (event with Public IPs)

1 answer

Your answer

Andreas Baumgarten 122.3K Reputation points MVP Volunteer Moderator

2022-10-14T20:23:45.15+00:00

Hi @MyAzQuery ,

you are connecting to the VM in VNet2 via public IP?
How are you trying to connect to the VM in VNet1? Via Public IP?

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten
MyAzQuery 171 Reputation points

2022-10-15T17:48:26.187+00:00

yes via Public IP.

Is it possible that there is some firewall in the Hub Network , which is blocking INBOUND RDP 3389 access to the Azure VM (event with Public IPs)

Answer 1

Andreas Baumgarten 122.3K MVP Volunteer Moderator

Hi @MyAzQuery ,

it could be a firewall in your Azure environment, if you deployed a firewall.
Also it could be a Network Security Group (NSG) that is blocking the inbound RDP connection. A NSG could be associated with a NIC of a VM or/and a vNet/subnet.
What kind of Public IP SKU do you use?

Public IPs with SKU Standard are blocking incoming traffic without a NSG. (Using a NSG is required)
Public IPs with SKU Basic are allowing incoming traffic without a NSG. (Using a NSG is recommend but not required)
https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses#sku

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

MyAzQuery 171 Reputation points

2022-10-16T15:30:45.443+00:00

it is standard IP

NSG for NIC allows 3389 inbound. i already mentioned in initial problem statement.

Can firewall in Hub , block public IP RDP access ?
Andreas Baumgarten 122.3K Reputation points MVP Volunteer Moderator

2022-10-16T16:04:34.767+00:00

Hi @MyAzQuery ,

Can firewall in Hub , block public IP RDP access ? -> Not directly

You wrote you are connecting to the VM using the Public IP of the VM.
Depending on the routing table of the VM the internet traffic should be routed directly to the internet. Or are you using a UDR for the subnet the VM is connected to?

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Share via

not able to RDP to azure VM

1 answer

Your answer