Azure SQl Database

Question

Azure SQl Database

Jayaprakash Pulugovinda 0

Hi Team,

I have created a sample database in azure cloud using azure sql database using single database approach.

Now issue is the particular database is not able to access through Azure VM or other machines but able to access through my local machine . For this i have set the fire wall rule to allow the access to all from start ip 0.0.0.0 to end ip 255.255.255.255 but still the azure Vm is not able to access the DB . Kindly let me know what is the mistake i am doing or any help is grateful .

4 answers

Your answer

Answer 1

Balmukund 176 Microsoft Employee

What is the error message you are getting? What do you see when you ping logical server name?

for testing, can you try "Allow Azure Services" and share the behavior?

Jayaprakash Pulugovinda 0 Reputation points

2023-02-16T05:45:21.1433333+00:00

hi i have tried to ping 1433 port and nothing was displaying also tried the telnet command no error message just a blank screen, but in my local machine its able to connect but not other machine or azure vm
Balmukund 176 Reputation points Microsoft Employee

2023-02-16T06:33:48.1766667+00:00
run below from Powershell, working and non-working and share the output.

Test-NetConnection -ComputerName ServerName.database.windows.net -Port 1433
SSingh-MSFT 16,371 Reputation points Moderator

2023-02-16T06:33:53.9466667+00:00

Hi @Jayaprakash Pulugovinda,

We are sorry about the issue you are are facing.

Could you please share screenshot of the troubleshoot steps you are trying?

Additionally, make sure that the firewall rule you created is correctly configured and is allowing access to the Azure SQL Database, could also check that the Azure SQL Database is accessible from the Azure VM or other machines by using the telnet command, also you can try creating a new firewall rule with a specific IP address range or try connecting to the Azure SQL Database using a virtual network service endpoint.

Let us know if the above options helped in your case.
Jayaprakash Pulugovinda 0 Reputation points

2023-02-16T07:13:04.12+00:00

For Azure VM non working

ComputerName : rfdemo.database.windows.net

RemoteAddress : 40.79.153.12

RemotePort : 1433

InterfaceAlias : Ethernet

SourceAddress : 10.0.0.7

TcpTestSucceeded : True

for Local working

ComputerName : rfdemo.database.windows.net

RemoteAddress : 40.78.225.32

RemotePort : 1433

InterfaceAlias : Wi-Fi

SourceAddress : 192.168.29.79

TcpTestSucceeded : True
Jayaprakash Pulugovinda 0 Reputation points

2023-02-16T07:16:34.1166667+00:00

Hi Kindly find screen shot of set fire wall for all the adress

Kindly let me know if it is fine
Jayaprakash Pulugovinda 0 Reputation points

2023-02-16T08:34:44.77+00:00

Hi Balmukund

I am very much new to Azure SQL Db with the help of tutorial i have created the single database . But let me know if there is any other steps to create the Azure SQl DB so that it can b access to everyone . Kindly help me on this

So from the scratch i can create the Azure SQL,

Currently i have migrated all my Access Db to AZure SQL using SSMS tool is this might cause any problem let me know .

Answer 2

Bas Pruijn 956

Most likely this issue is not caused by the SQL Server/Database. I would expect the virtual network your VM is connected to is the culprit. I would expect there to be either a firewall or a NSG that is blocking internet access for this VM, or the DNS settings for this VM are preventing it to find the SQL Server.

You could try to do a NSLOOKUP <SQL server name>.database.windows.net or ping the SQL Server from the VM. That might give you insights in if there is a network block going on.

If you are using a windows VM, you could also use powershell to check the connection on port 1433. https://learn.microsoft.com/en-us/powershell/module/nettcpip/test-netconnection?view=windowsserver2022-ps

Jayaprakash Pulugovinda 0

hi below is the details

note:- i am not expert in networking just have a basic knowledge

not able to get any info what it is causing blocking.

Below is AZURE VM itself

PS C:\Users\testingpfs> nslookup rfdemo.database.windows.net
Server:  UnKnown
Address:  168.63.129.16

Non-authoritative answer:
Name:    cr3.eastus1-a.control.database.windows.net
Address:  40.79.153.12
Aliases:  rfdemo.database.windows.net
          dataslice6.eastus.database.windows.net
          dataslice6eastus.trafficmanager.net

PS C:\Users\testingpfs> ping rfdemo.database.windows.net

Pinging cr5.eastus1-a.control.database.windows.net [40.78.225.32] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.

Bas Pruijn 956 Reputation points

2023-02-20T14:08:21.95+00:00

Your vm is using the Azure DNS. That is looking fine. The IP address you receive is the public IP address of the SQL Server. That looks correct.

It seems that your network traffic is blocked somewhere between the VM and the SQL Server. This is either a NSG blocking outbound traffic (not default), an (Azure) firewall blocking traffic, of the firewall of the SQL Server. Hover, you state that in the SQL firewall all IP addresses are allowed, so that should not be the issue.

Answer 3

RahulRandive 10,486 Volunteer Moderator

Hi,

To get the meaningful network error/details, you can execute below Azure SQL Connectivity Checker from the VM

https://github.com/Azure/SQL-Connectivity-Checker

Please follow the instruction from the blog

You need to pass below details in the script and run from PowerShell ISE

Server = ''

Database = ''

User = ''

Password = ''

Once the script executes, it will generate an output in the folder and the folder opens automatically after the script completes.

Jayaprakash Pulugovinda 0 Reputation points

2023-02-17T05:05:57.0366667+00:00

Hi Rahul

Thanks for the steps , i have followed your steps and got this error in following script document.

Client received Error token, Number: 40613, State: 1

Could you help me on this error and how to resolve this .

[2023.02.17 04:50:28.0749] Client received Error token, Number: 40613, State: 1

[2023.02.17 04:50:28.0749] MsgText: Database '' on server '.database.windows.net' is not currently available. Please retry the connection later. If the problem persists, contact customer support, and provide them the session tracing ID of '{02F482B4-8A9E-4944-B720-94FD21B3E5D5}'.

[2023.02.17 04:50:28.0749] Class: 20
Jayaprakash Pulugovinda 0 Reputation points

2023-02-17T05:25:53.83+00:00

Hi Rahul

Thanks for the above scripts and i have executed in Azure VM

below is the error message i have received Kindly please help me out for below error.

[2023.02.17 04:50:28.0749] Client received Error token, Number: 40613, State: 1

[2023.02.17 04:50:28.0749] MsgText: Database '' on server '.database.windows.net' is not currently available. Please retry the connection later. If the problem persists, contact customer support, and provide them the session tracing ID of '{02F482B4-8A9E-4944-B720-94FD21B3E5D5}'.

[2023.02.17 04:50:28.0749] Class: 20

Answer 4

Hi @Jayaprakash Pulugovinda,

I suppose you have followed the documentation: Configure the Azure VPN Client - Azure AD authentication - Windows

For Azure SQL Server to be accessed from Azure VM, could you please try below mentioned steps and let us know your results:

Navigate to "Firewalls and virtual networks" of you SQL server and make sure to set "Deny public network access" to yes.
Create an Azure private endpoint. It will create endpoint for SQL server within your virtual network and it'll be assigned a private IP from within subnet's IP range. You will use this private IP to connect to SQL server.
On your local machine, make sure you're connected to VPN and open SQL Server Management Studio:

Under "Server name" enter private IP address of Azure private endpoint created in step 2.
Under "Login" field, enter username in format "username@public_sql_server_name" (e.g. ******@my-sql-server.database.windows.net). For password, just enter your password.
Last thing to do is to click on "Options" and navigate to "Connection properties". Make sure to check "Encrypt connection" and "Trust server certificate". This is required as server's certificate is issued to "my-sql-server.database.windows.net" and you're accessing it via private IP. If this wasn't checked, management studio wouldn't trust server's certificate and would refuse connection.

Let us know at which step you get error.

Please try and we can further check on this. Thanks.

Share via

Azure SQl Database

4 answers

Your answer