Spoke to onprem connection

Jean-Claude Kalunga 21 Reputation points
2022-06-22T19:06:45.497+00:00

Hi All,

I just deployed this ARM template from Microsoft.

  1. I created a rule on the firewall to allow ping from on-prem VM to the spoke VM as follows:
        name: allowping  
        protocol: ICMP:  
        Source Addresses: 192.168.1.128/25,10.100.0.0/16  
        destination addresses:  10.100.0.0/16,192.168.1.128/25  
        Desitnation ports: 1  
    

I can ping from on-prem to the spoke but a ping from spoke to on-prem fails, any idea why? how do I make it work?

Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
570 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Dave Patrick 426.1K Reputation points MVP
    2022-06-22T19:13:22.687+00:00

    Might check that ICMP is allowed through the firewall profile currently in use.

    213988-image.png


  2. Dave Patrick 426.1K Reputation points MVP
    2022-06-22T20:34:49.227+00:00

    Can you successfully ping it from other public locations? Is the device public facing? If not you may need to check the routing (or NAT) device is setup to allow the round trip ICMP echo.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments