Reputation: 9363
I have setup a LB with a backend pool (only one host for test). I setup network security group on test host with following rule:
Source: AzureLoadBalancer Destination: Any Action: Allow
Source: VirtualNetwork Destination: VirtualNetwork Action: Allow
Source: Any Destination: Any Action: Deny
I can't connect to host through LB (from host in the same VNET). It's a public LB and I try to connect through ip public.
If I setup a rule Source: Any Destination: Any Action: Allow
All work fine.
Of course, I don't want this rule.
What's wrong with my setup ?
Thanks.
Upvotes: 0
Views: 316
Reputation: 28274
You need to add an inbound port rule to allow connections from remote location to virtual machines. Find the network security group associated with the host Vnet. Add the inbound port (rdp 3389, ssh 22 or other port your self-defining ) which you allow to connect the host. Additionally, you will give every rule a priority. Low number of priority means high priority.
For more information about create a public Basic load balancer by using the Azure portal.
Upvotes: 2