Share via

Azure VM to VM communication

Dave 1 Reputation point
Nov 27, 2019, 1:39 PM

Hello All,
Looking form some information and how-to


I would like to have my VMs on two different V-Nets be able to communicate with each other....
I know I can do peering between the V-Nets and that allows communication fine, and I have set that up between a couple of my V-Nets.
But I want to take a more secure approach to things, because I will have to lock things down in preparation for PCI testing.
So I have a machine sitting in East US and it's IP is 10.51.0.132
I set up another VM in East US 2 and it's IP is 10.54.0.4
I went in and added Inbound/Outbound rules on both of the NSG's associated with the two machines....allowed all ports and all protocols....so just wide open.
But I am not able to ping from one to the other.

Where am I messing up??
Thank you

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
8,182 questions
{count} votes

3 answers

Sort by: Most helpful
  1. Emerson Caro 86 Reputation points
    Dec 18, 2019, 4:19 AM

    For that to happen, you need to do two things:

    1. Peer the two VNets together.
    2. Create an NSG rule that only allows those two VMs to communicate with each other; no other VMs should be able to communicate to the other VNet.

    On the rule, for PING (ICMP) to work, you need to also allow ICMP for the Virtual Machines to be able to ping each other.

    If it's still not working, if it's on Windows, try disabling the Windows Firewall as this may be blocking the ping request or create an exception by just enabling ping (ICMP).

    1 person found this answer helpful.
    0 comments No comments

  2. Riku Pirttinokka 1 Reputation point
    Nov 27, 2019, 2:00 PM

    You have to allow the ping request from the operation system also.
    https://www.thomasmaurer.ch/2019/09/how-to-enable-ping-icmp-echo-on-an-azure-vm/


  3. Ehfaz R 1 Reputation point
    Nov 29, 2019, 2:48 PM

    Looks like everything has been configured at the network layer in Azure. However, what about the Windows firewall on both the machines? You have to open the respective ports, else if you need to configure admin access to-and-fro, you can disable the Windows firewall on both the machines (at least to test it out).

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.