APIM and AKS integration

Question

I am trying to integrate APIM(External) to the VNet where AKS is running. right now, I have created /29 CIDR subnet where AKS subnet is there and assigned to the APIM but APIM keep complaining that port 3443 is blocked. I have specifically added the rule to allow 3443 as mentioned in the troubleshooting steps https://learn.microsoft.com/en-us/azure/api-management/api-management-using-with-vnet#-common-network-configuration-issues to NSG assigned to the subnet, but still it throws the error? can someone help me how to troubleshoot further?

NSG Rule for subnet -> Inbound

priority- 102, Name - Port_3443, port - 3443, protocol - TCP, Source -
ApiManagement, Destination - VirtualNetwork, Action - Allow

Update: I have removed NSG from the subnet where APIM is, still its showing the same issue.
Do we have to add the port in all the subnet inside the Vnet ?

Answer 1

@PRS Have you tried doing the same deployment against a regular VNET? I believe the External mode attempts to auto-configure some settings under the covers and I suspect they may not be working with AKS.