Change bastion for specific VMs

Muhammad Zeeshan 241

Hi ,

I have a vnet with two ennviornments staging and production. THey both use the same Bastion credentials to connect with.
I want the production environment to have separate credentials , so my questions are

1) can a VNET have multiple bastion subnets ?
2) How can i have different bastion credentials for different VMs residing the same VNet ? Mind you that the customer only wants bastion to connect to VMs.

ChaitanyaNaykodi-MSFT 24,666 Reputation points Microsoft Employee

2022-04-05T22:20:10.943+00:00

Hello @Muhammad Zeeshan ,

1) can a VNET have multiple bastion subnets ?

No, you can only have one AzureBastionSubnet subnet in a VNET.

2) How can i have different bastion credentials for different VMs residing the same VNet ? Mind you that the customer only wants bastion to connect to VMs.

Not sure if I have understood the question correctly. The UserName/Password you use via Bastion to access your VM are the credentials given when you created the VM. You can have different credentials for different VMs. If this is not a correct solution, can you please elaborate on how your staging and production environment are set up?
Muhammad Zeeshan 241 Reputation points

2022-04-28T16:20:16.937+00:00

Apologies for the late reply.

I have a VM behind a firewall with its public ip binded to a private IP at eh firewall level.

RDP and SSH are not allowed and as per security policy none of the VMs can have public IP directly. Only access to the VM is allowed through bastion. When I created the VM I did not enable AAD login on the VM.

Now the users of a certain department want access to it and they want to connect through their Azure AD login credentials .

I installed the AAD login extension on the VM and provided each user with virtual machine user login role.

how can I allow access to the VM through their AAD credentials , they dont want to use the same bastion credentials to login to the VM.

Share via

Change bastion for specific VMs