Problems with peering between two vnet in different regions

Hugo Alberto Cabra Alonso 0 Reputation points
2023-04-13T20:31:35.92+00:00

I have two subnets, once a East US and another in the Central US, I created pering with the options show below: Screen Shot 2023-04-13 at 3.25.02 PM

Screen Shot 2023-04-13 at 3.25.24 PM

However, I have ping from the subnet the EastUS to subnet in CentralUs, but not from Central US to EastUS Any ideas the issue?

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,753 questions
{count} votes

1 answer

Sort by: Most helpful
  1. ChaitanyaNaykodi-MSFT 27,461 Reputation points Microsoft Employee Moderator
    2023-04-14T05:07:18.3233333+00:00

    @Hugo Alberto Cabra Alonso Thank you for reaching out on the Microsoft Q&A forum. If based on my understanding from your question above you have setup peering between two Vnets located in East US and Central US respectively. You are able to ping from the subnet the EastUS to subnet in CentralUs, but not from Central US to EastUS. Based on the troubleshooting document here

    • Check the network traffic flows:
    1. Use Connection Troubleshoot and IP flow verify from the source VM to the destination VM to determine whether there is an NSG or UDR that is causing interference in traffic flows.
    • Take a network trace:
    1. Start a network trace on the destination VM. For Windows, you can use Netsh. For Linux, use TCPDump.
    2. Run TcpPing or PsPing from the source to the destination IP. This is an example of a TcpPing command: tcping64.exe -t <destination VM address> 3389
    3. After the TcpPing is complete, stop the network trace on the destination.
    4. If packets arrive from the source, there is no networking issue. Examine both the VM firewall and the application listening on that port to locate the configuration issue.

    If TCPPing is working as expected, then the issue will be only related to ICMP traffic. It will help if you can check if any firewall is blocking this connectivity.

    Hope this helps! Please let me know if you need any further assistance. Thank you!

    ​​Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.