Can I use bastion with Virtual WAN?

Question

I am using Azure Virtual WAN. I have created a DevTestLab in one of my spokes. One of the options for accessing the lab is through a Bastion, but I don't believe Azure Virtual WAN supports bastion (yet?). Does this mean I have to create an RDS infrastructure to allow access without going via a VPN to the DevTestLab?

Answer 1

Hello @Anonymous , Welcome to the Microsoft Q&A forum.

Yes, you are correct Azure Bastion does not support VNET's peered over Azure Virtual WAN. This limitation is currently documented here. Please feel free to upvote this feature request on our feedback portal.

Does this mean I have to create an RDS infrastructure to allow access without going via a VPN to the DevTestLab?

I am not sure if I understood this question correctly, but you can refer to this Hub and Spoke Architecture using Azure Virtual WAN for more information on how to establish hub-spoke connectivity. If this does not help answer your question. Can you please elaborate more on your architecture?

Hope this helps! Please let me know if you have any additional questions. Thank you!

----------

​​Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Deploying Azure Bastion within a Virtual WAN hub is not supported. You can deploy Azure Bastion in a spoke VNet and use the IP-based connection feature to connect to virtual machines deployed across a different VNet via the Virtual WAN hub.

You can refer the below article if you want to use azure bastion in the VWan Scenario.

https://www.linkedin.com/pulse/issue-azure-bastion-virtual-wan-elliott-leighton-woodruff-99qze