RDP Using Public IP

Question

RDP Using Public IP

Handian Sudianto 6,096

Hello,

I want RDP to my azure vm using public ip, and want to know why i must create specific rule for that vm (rule number 1501)? Without rule 1501 i'm not able rdp using public ip. Isn't rule number 1000 say traffic from any to any with port number 3389 is allowed?

User's image

deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-12-15T17:15:44.7933333+00:00
@Handian Sudianto
It is possible there is another rule in place that is preventing rule 1000 from working. Please check the following:

Go to the Azure portal and navigate to the Network Watcher service.

Select NSG Diagnostics under Network Diagnostic Tools.

Enter or select the following values:

Target: The network interface of the VM.

Protocol: TCP.

Destination port ranges: 3389.

Click on Start to initiate the diagnostic test.

The results will show the effective security rules applied to the VM, including any conflicting rules that might be blocking RDP access.
Handian Sudianto 6,096 Reputation points

2023-12-16T02:36:37.56+00:00

Hi.. Without rule number 1501 i can rdp but must use private ip address, can't rdp using vm public ip. So seem rule 1000 only can rdp using private ip addr, and for remoting using public ip we should makebanother rule with fill destination with vm ip addr.

1 answer

Your answer

deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-12-15T17:15:44.7933333+00:00

@Handian Sudianto
It is possible there is another rule in place that is preventing rule 1000 from working. Please check the following:

Go to the Azure portal and navigate to the Network Watcher service.

Select NSG Diagnostics under Network Diagnostic Tools.

Enter or select the following values:

Target: The network interface of the VM.

Protocol: TCP.

Destination port ranges: 3389.

Click on Start to initiate the diagnostic test.

The results will show the effective security rules applied to the VM, including any conflicting rules that might be blocking RDP access.
Handian Sudianto 6,096 Reputation points

2023-12-16T02:36:37.56+00:00

Hi.. Without rule number 1501 i can rdp but must use private ip address, can't rdp using vm public ip. So seem rule 1000 only can rdp using private ip addr, and for remoting using public ip we should makebanother rule with fill destination with vm ip addr.

Answer 1

msrini-MSFT 9,291 Microsoft Employee

Hi, Even if you remove the rule number 1000, RDP to the VM with IP 10.201.10.23 using the public IP or private IP should work. When it comes to NSG the destination IP can only be private IP address.

Handian Sudianto 6,096 Reputation points

2023-12-17T23:29:13.41+00:00

Hi @msrini-MSFT

Without rule number 1501 i able to RDP to the vm using IP 10.201.10.23 but not able RDP using public ip, so i create rule number 1501.

So if we not put destination on the rule are this rule mean only private ip is allowed? And if we specify the destination like 10.201.10.23 this mean we can access both via public and private ip?
msrini-MSFT 9,291 Reputation points Microsoft Employee

2023-12-18T05:11:49.1366667+00:00

Yes that is correct. Make sure the private IP which you have entered in the destination is correct. Also check if you have another NSG associated to the subnet where you are not allowing the RDP port
Handian Sudianto 6,096 Reputation points

2023-12-18T05:30:56.93+00:00

Hi @msrini-MSFT

Any reference article say to allowing RDP using Public IP we must need create specific rule?
msrini-MSFT 9,291 Reputation points Microsoft Employee

2023-12-18T10:12:52.9166667+00:00

By default you can see there are 3 rules which block any public access inwards to the VMs. TO allow RDP, you will need to add a rule starting from this IP, allow port 3389 to the destination VM.

Share via

RDP Using Public IP

1 answer

Your answer