AlexB
AlexB

Reputation: 4546

Azure load balancer with NAT rule hiding port for RDP

I have internet facing Azure load balancer with public static IP (call it PIP) and I added a NAT rule - forward TCP port 12345 to local (subnet's IP) 10.2.2.2:3389 (VM that doesn't have public IP). And I'm trying to set NSG for subnet and VM's NIC.

subnet's NSG rules (all TCP):

VM's NSG rules:

and here's the problem: if I use Network Watcher's IP flow verify and set local IP to 10.2.2.2:3389, Remote IP:[PIP:12345] I get green light. Same with setting both ports (local and remote) to 3389. But when I'm trying to Remote Desktop to that VM from outside I get a connection error!

I have no idea why. The VM is up and running, all good here.

Upvotes: 0

Views: 1979

Answers (1)

Jason Ye
Jason Ye

Reputation: 13974

You should change your subnet NSG inbound rules like this:

120: Source Internet:12345 => 10.2.2.2:3389

You should allow public IP address (from outside) to access your Azure subnet.

Upvotes: 0

Related Questions