Share via

Azure VM to connect to SQl Managed Instance

Wanda Shelton 26 Reputation points
2021-11-29T21:17:14.713+00:00

When creating An Azure VM I am getting errors in deployment failed. Is there a comprehensive tutorial on how to create the correct network rules and protocols. I dont recall creating any and am now confused at to how they are neither there or conflicting with one another.
Error:
*{"code":"DeploymentFailed","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.","details":[{"code":"ConflictWithNetworkIntentPolicy","message":"Found conflicts with NetworkIntentPolicy. Details: NetworkInterface cannot have resources which conflict with subnet's network intent policy.\r\nNetwork Security Group: /subscriptions/cf4be82e-f5d9-46f2-986b-64bf53362634/resourceGroups/DevResources/providers/Microsoft.Network/networkSecurityGroups/DevTestVM-NSG conflicts with Network Intent Policy: mi_default_45ef21f5-e1ff-4f18-a10b-f0908726e0e8_10-0-0-0-24\r\n Network Security Group doesn't have supporting Security Rule for Network Intent Policy Security Rule: Name: mi-sqlmgmt-in-10-0-0-0-24-v10, Id: /subscriptions/cf4be82e-f5d9-46f2-986b-64bf53362634/resourceGroups/DevResources/providers/Microsoft.Network/networkIntentPolicies/mi_default_45ef21f5-e1ff-4f18-a10b-f0908726e0e8_10-0-0-0-24/securityRules/mi-sqlmgmt-in-10-0-0-0-24-v10, Access: Allow, Direction: Inbound, Protocol: Tcp, SourceAddressPrefix: SqlManagement, SourcePortRange: *, DestinationAddressPrefix: 10.0.0.0/24, DestinationPortRange: 9000;9003;1438;1440;1452\r\n ----\r\n Network Security Group doesn't have supporting Security Rule for Network Intent Policy Security Rule: Name: mi-corpsaw-in-10-0-0-0-24-v10, Id: /subscriptions/cf4be82e-f5d9-46f2-986b-64bf53362634/resourceGroups/DevResources/providers/Microsoft.Network/networkIntentPolicies/mi_default_45ef21f5-e1ff-4f18-a10b-f0908726e0e8_10-0-0-0-24/securityRules/mi-corpsaw-in-10-0-0-0-24-v10, Access: Allow, Direction: Inbound, Protocol: Tcp, SourceAddressPrefix: CorpNetSaw, SourcePortRange: *, DestinationAddressPrefix: 10.0.0.0/24, DestinationPortRange: 9000;9003;1440\r\n ----\r\n Network Security Group doesn't have supporting Security Rule for Network Intent Policy Security Rule: Name: mi-corppublic-in-10-0-0-0-24-v10, Id: /subscriptions/cf4be82e-f5d9-46f2-986b-64bf53362634/resourceGroups/DevResources/providers/Microsoft.Network/networkIntentPolicies/mi_default_45ef21f5-e1ff-4f18-a10b-f0908726e0e8_10-0-0-0-24/securityRules/mi-corppublic-in-10-0-0-0-24-v10, Access: Allow, Direction: Inbound, Protocol: Tcp, SourceAddressPrefix: CorpNetPublic, SourcePortRange: *, DestinationAddressPrefix: 10.0.0.0/24, DestinationPortRange: 9000;9003\r\n ----\r\n Network Security Group doesn't have supporting Security Rule for Network Intent Policy Security Rule: Name: mi-internal-in-10-0-0-0-24-v10, Id: /subscriptions/cf4be82e-f5d9-46f2-986b-64bf53362634/resourceGroups/DevResources/providers/Microsoft.Network/networkIntentPolicies/mi_default_45ef21f5-e1ff-4f18-a10b-f0908726e0e8_10-0-0-0-24/securityRules/mi-internal-in-10-0-0-0-24-v10, Access: Allow, Direction: Inbound, Protocol: *, SourceAddressPrefix: 10.0.0.0/24, SourcePortRange: *, DestinationAddressPrefix: 10.0.0.0/24, DestinationPortRange: *\r\n ----\r\n Network Security Group doesn't have supporting Security Rule for Network Intent Policy Security Rule: Name: mi-services-out-10-0-0-0-24-v10, Id: /subscriptions/cf4be82e-f5d9-46f2-986b-64bf53362634/resourceGroups/DevResources/providers/Microsoft.Network/networkIntentPolicies/mi_default_45ef21f5-e1ff-4f18-a10b-f0908726e0e8_10-0-0-0-24/securityRules/mi-services-out-10-0-0-0-24-v10, Access: Allow, Direction: Outbound, Protocol: Tcp, SourceAddressPrefix: 10.0.0.0/24, SourcePortRange: *, DestinationAddressPrefix: AzureCloud, DestinationPortRange: 443;12000\r\n ----\r\n Network Security Group doesn't have supporting Security Rule for Network Intent Policy Security Rule: Name: mi-internal-out-10-0-0-0-24-v10, Id: /subscriptions/cf4be82e-f5d9-46f2-986b-64bf53362634/resourceGroups/DevResources/providers/Microsoft.Network/networkIntentPolicies/mi_default_45ef21f5-e1ff-4f18-a10b-f0908726e0e8_10-0-0-0-24/securityRules/mi-internal-out-10-0-0-0-24-v10, Access: Allow, Direction: Outbound, Protocol: *, SourceAddressPrefix: 10.0.0.0/24, SourcePortRange: *, DestinationAddressPrefix: 10.0.0.0/24, DestinationPortRange: \r\n ----\r\n---- ----"}]}

Azure Virtual Network
Azure Virtual Network

An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.

Azure Data Science Virtual Machines
Azure Data Science Virtual Machines

Azure Virtual Machine images that are pre-installed, configured, and tested with several commonly used tools for data analytics, machine learning, and artificial intelligence training.

Azure Policy
Azure Policy

An Azure service that is used to implement corporate governance and standards at scale for Azure resources.

0 comments No comments

Answer accepted by question author

msrini-MSFT 9,311 Reputation points Microsoft Employee
2021-11-30T04:11:12.39+00:00

@Wanda Shelton ,

Are you trying to deploy the VM in the same subnet as that of your SQLMi ?

If yes, that is the reason you are getting this error. Try to deploy it in another subnet. It should work.

Regards,
Karthik Srinivas

Was this answer helpful?


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.