This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 42%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
I want to implement a solution for an application server (VM1) and a database server (VM2) which allows me to SSH into VM2 from VM1 in the same Virtual Network. VM1 has a public IP address and ports 22 & 80 are allowed in the NSG Group while VM2 has a private IP address with ports 22 & 3306 enabled. I have been unable to SSH into VM2 from VM1 as I got a "bad permission error" response, despite applying NAT & Bastion. Please help, there must be something I am missing.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 60%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECV%3C/text%3E%3C/svg%3E)
Hello @Mauyon Akinola
Thank you for your question!
If the answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!
Hope above answers your question.
Thanks!
Carlos V.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(224.00000000000003, 33%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Dear Carlos,Thank you for your help. I had actually been able to resolve before now. I needed to run CHMOD command first before attempting to SSH into the database VM, a step which I missed out initially. However, I'll try this solution too.
Hi,
SSH to VM2 from VM1 can be achieved using the Private IP address. You can first login to the VM1 and then use the VM1's Private IP and try doing an SSH.
Can you also post the exact error that you are getting ?
Regards,
Karthik Srinivas
Dear Karthik,Thank you for your help. I had actually been able to resolve before now. I needed to run CHMOD command first before attempting to SSH into the database VM, a step which I missed out initially. However, I'll try this solution too.
Hi
a few queries that may help:
Do the VM's reside in the same Subnet within the VNET, or different Subnets?
Do you have NSG's applied at VNET, Subnet or directly on the VM NICs?
Have you tried using Azure Network Watcher to assist with diagnosing the connectivity between the 2 endpoints?
Hope this helps,
Thanks
Michael Durkan
Hello @Mauyon Akinola
Thank you for your question!
I am just following up again to confirm if the answer has been helpful, please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!
Hope above answers your question.
Thanks!
Carlos V.
Dear Carlos,Thank you for your help. I had actually been able to resolve before now. I needed to run CHMOD command first before attempting to SSH into the database VM, a step which I missed out initially. However, I'll try this solution too.
Dear Michael, Thank you for your help. I had actually been able to resolve before now. I needed to run CHMOD command first before attempting to SSH into the database VM, a step which I missed out initially. However, I'll try this solution too.