default NSG rule

Question

Hi,

About the default rule:
permit virtaulnetwork virtualnetwork any
I understand that the "virtaulnetwork " represent the vnet that the NSG is applied on.
but when I created a peering vnet 2 vnet and the rule exist the traffic is allowed through the rule.
Is the virtaulnetwork means the vnet where the NSG applied on or it means any vnet in the subscription?

Regards,
Shai

Answer 1

The Virtual Network as Source or Target in a NSG is a tag.

To get the details, what is the meaning/definition of the tag Virtual Network maybe this helps:

The virtual network address space (all IP address ranges defined for the virtual network), all connected on-premises address spaces, peered virtual networks, virtual networks connected to a virtual network gateway, the virtual IP address of the host, and address prefixes used on user-defined routes. This tag might also contain default routes.

Source: https://learn.microsoft.com/en-us/azure/virtual-network/service-tags-overview#available-service-tags (search for "Virtual Network" in the table

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

@shai perretz

Security rules in network security groups enable you to filter the type of network traffic that can flow in and out of virtual network subnets and network interfaces.

refer - https://learn.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

----------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.