You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/power-platform/administration/virtual-network.md
+25-23Lines changed: 25 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,27 +11,29 @@ search.audienceType:
11
11
- admin
12
12
contributors:
13
13
ms.custom: sap:Environment - Administration
14
+
15
+
#customer intent: As a developer or IT administrator, I want to troubleshoot my Virtual Network configuration in Power Platform so that my application function as intended.
14
16
---
15
17
16
18
# Troubleshoot Virtual Network issues
17
19
18
-
This article provides guidance on troubleshooting common scenarios for [Virtual Network](/power-platform/admin/vnet-support-overview) in Power Platform. It focuses on the use of a PowerShell module to help you identify and resolve issues related to Virtual Network configurations.
20
+
This article provides guidance on troubleshooting common scenarios for [Virtual Networks](/power-platform/admin/vnet-support-overview) in Power Platform. It focuses on the use of the [Microsoft.PowerPlatform.EnterprisePolicies](https://www.powershellgallery.com/packages/Microsoft.PowerPlatform.EnterprisePolicies) PowerShell module to help you identify and resolve issues related to Virtual Network configurations.
19
21
20
-
## Diagnostics PowerShell Module
22
+
## Identify the issue using the diagnostics PowerShell module
21
23
22
-
The Diagnostics PowerShell Module is a tool designed to help you diagnose and troubleshoot issues related to Virtual Network configurations in Power Platform. The module can be used to check the connectivity between your Power Platform environment and your Virtual Network, and to identify any misconfigurations that might be causing issues. It's available from the PowerShell Gallery and from our GitHub repository: [PowerPlatform-EnterprisePolicies](https://github.com/microsoft/PowerPlatform-EnterprisePolicies)
24
+
The `Microsoft.PowerPlatform.EnterprisePolicies` PowerShell module is a tool designed to help you diagnose and troubleshoot issues related to Virtual Network configurations in Power Platform. The module can be used to check the connectivity between your Power Platform environment and your Virtual Network. It can also help identify any misconfigurations that might be causing issues. It's available from the PowerShell Gallery and from its GitHub repository: [PowerPlatform-EnterprisePolicies](https://github.com/microsoft/PowerPlatform-EnterprisePolicies)
23
25
24
-
### Installing the module
26
+
### Install the module
25
27
26
-
To install the Diagnostics PowerShell Module, you can use the following command in PowerShell:
28
+
To install the diagnostics PowerShell module, use the following PowerShell command:
@@ -44,57 +46,57 @@ The module includes several functions that can be used to diagnose and troublesh
44
46
-[Test-DnsResolution](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Test-DnsResolution.md): Tests the DNS resolution for the specified domain name.
45
47
-[Test-NetworkConnectivity](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/blob/main/docs/en-US/Microsoft.PowerPlatform.EnterprisePolicies/Test-NetworkConnectivity.md): Tests the network connectivity between the Power Platform environment and the specified Virtual Network.
46
48
47
-
### Report issues with the diagnostic module
49
+
### Report issues with the diagnostics module
48
50
49
-
If you encounter issues while running the diagnostic module, report them through the GitHub repository where the module is hosted. The repository is available at: [PowerPlatform-EnterprisePolicies](https://github.com/microsoft/PowerPlatform-EnterprisePolicies).
51
+
If you encounter issues while running the diagnostics module, report them through the GitHub repository where the module is hosted. The repository is available at: [PowerPlatform-EnterprisePolicies](https://github.com/microsoft/PowerPlatform-EnterprisePolicies).
50
52
51
-
To report an issue, go to the Issues section of the repository and create a [new issue](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/issues/new). Provide detailed information about the problem you're facing, including any error messages or logs that might help in diagnosing the issue. The more information you provide, the easier it is for us to assist you. Don't include any sensitive information in your report.
53
+
To report an issue, go to the **Issues** section of the repository and create a [new issue](https://github.com/microsoft/PowerPlatform-EnterprisePolicies/issues/new). Provide detailed information about the problem you're facing, including any error messages or logs that might help when investigating the issue. Don't include any sensitive information in your report.
52
54
53
-
## How to troubleshoot common scenarios
55
+
## Troubleshoot common issues
54
56
55
57
### Misconfiguration of regions
56
58
57
-
If you have verified that everything is correctly configured but you're still experiencing issues, you can use the `Get-EnvironmentRegion` function from the Diagnostics PowerShell Module to check if the region of your Power Platform environment is the same as the regions where you have been configuring your Virtual Network. You can run the following command:
59
+
If you have verified that everything is correctly configured but you're still experiencing issues, you can use the `Get-EnvironmentRegion` function from the diagnostics PowerShell Module to check if the regions of your Power Platform environment are the same as the regions of your Virtual Network. To do so run the following command:
Your environment belongs to a specific PowerPlatform region. However, a PowerPlatform region can span multiple Azure regions. You need to ensure that your Virtual Network is configured in both of the Azure regions that correspond to your PowerPlatform region. Your environment can be located in either of the two Azure regions, and it can also automatically fail over between them. Therefore, to ensure high availability and connectivity, you should configure your Virtual Network in both Azure regions associated with your PowerPlatform region. You can find the mapping of the PowerPlatform regions to Azure regions that are support for the Virtual Network functionality at [Power Platform regions](/power-platform/admin/vnet-support-overview#supported-regions).
65
+
Your environment belongs to a specific PowerPlatform region. However, a PowerPlatform region can span multiple Azure regions. You need to ensure that your Virtual Network is configured in all of the Azure regions that correspond to your PowerPlatform region. Your environment can be located in either of the two Azure regions, and it can also automatically fail over between them. Therefore, to ensure high availability and connectivity, you should configure your Virtual Network in both Azure regions associated with your PowerPlatform region. You can find the mapping of the PowerPlatform regions to Azure regions that are support for the Virtual Network functionality at [Power Platform regions](/power-platform/admin/vnet-support-overview#supported-regions).
64
66
65
67
### Hostname not found
66
68
67
-
If you're experiencing issues with hostname resolution, you can use the `Test-DnsResolution` function from the Diagnostics PowerShell Module to check if the hostname is being resolved correctly. You can run the following command:
69
+
If you're experiencing issues with hostname resolution, you can use the `Test-DnsResolution` function from the diagnostics PowerShell module to check if the hostname is being resolved correctly. To do so run the following command:
This command tests the DNS resolution for the specified hostname in the context of your Power Platform environment. The request will initiate from the subnet that you have delegated and will attempt to resolve the hostname using the DNS server that is configured for your Virtual Network. If the hostname isn't being resolved correctly, you might need to check your DNS settings and ensure that the hostname is correctly configured.
75
+
This command tests the DNS resolution for the specified hostname in the context of your Power Platform environment. The request initiates from your delegated subnet and attempts to resolve the hostname using the DNS server that is configured for your Virtual Network. If the hostname isn't being resolved correctly, you might need to check your DNS settings and ensure that the hostname is correctly configured.
74
76
75
77
> [!IMPORTANT]
76
78
> If you notice that your DNS setup is incorrect and need to update the DNS server settings for your Virtual Network, see [Can I update the DNS address of my Virtual Network after it's delegated to "Microsoft.PowerPlatform/enterprisePolicies"?](/power-platform/admin/vnet-support-overview#can-i-update-the-dns-address-of-my-virtual-network-after-its-delegated-to-microsoftpowerplatformenterprisepolicies)
77
79
78
80
### Unable to connect to the resource
79
81
80
-
If you're experiencing issues with connectivity to a resource, you can use the `Test-NetworkConnectivity` function from the Diagnostics PowerShell Module to check if there's connectivity. You can run the following command:
82
+
If you're experiencing issues with connectivity to a resource, you can use the `Test-NetworkConnectivity` function from the diagnostics PowerShell module to check for connectivity. To do so run the following command:
This command attempts to establish a TCP connection to the specified destination and port in the context of your Power Platform environment. The request will initiate from the subnet that you have delegated and will attempt to connect to the specified destination using the network configuration that is set up for your Virtual Network. If the connection fails, you might need to check your network settings and ensure that the destination is reachable from your Virtual Network. If the connection is successful, it indicates that there's network connectivity between the Power Platform environment and the specified resource.
88
+
This command attempts to establish a TCP connection to the specified destination and port in the context of your Power Platform environment. The request initiates from your delegated subnet and attempt to connect to the specified destination using the network configuration from your Virtual Network. If the connection fails, you might need to check your network settings and ensure that the destination is reachable from your Virtual Network. If the connection is successful, it indicates that there's network connectivity between the Power Platform environment and the specified resource.
87
89
88
90
> [!NOTE]
89
-
> This command only tests if a TCP connection can be established to the specified destination and port. It doesn't test if the resource is actually available or if there are any application-level issues that might be preventing access to the resource.
90
-
> Furthermore, some firewalls might be allowing TCP connections to be established but blocking actual traffic to the resource (that is, HTTPS). Therefore, even if the command indicates that there's network connectivity, it doesn't guarantee that the resource is fully accessible.
91
+
> This command only tests if a TCP connection can be established to the specified destination and port. It doesn't test if the resource is available or if there are any application-level issues that might be preventing access to the resource.
92
+
> Some firewalls might allow TCP connections to be established but block actual traffic to the resource (for example, HTTPS). Therefore, even if the command indicates there's network connectivity that doesn't guarantee that the resource is fully accessible.
91
93
92
94
### Connectivity is successful, but the application is still not working
93
95
94
-
If the connectivity tests are successful, but you're still experiencing issues with your application, you might need to check the application-level settings and configurations. Things that you can check include:
96
+
If the connectivity tests are successful, but you're still experiencing issues with your application, you might need to check the application-level settings and configurations. Some settings and configurations that you should check include:
95
97
96
-
- Validate in your firewall that the delegated subnet is allowed to access the resource.
98
+
- Validate that your firewall allows access from the delegated subnet to the resource.
97
99
- Validate that the certificate presented by the resource is publicly trusted.
98
-
- Ensure that there are no authentication or authorization issues that might be preventing access to the resource.
100
+
- Ensure there are no authentication or authorization issues preventing access to the resource.
99
101
100
-
If our existing tools aren't sufficient to diagnose the issue further. You might want to create a subnet without delegation in your Virtual Network and deploy a virtual machine in that subnet. You can then use the virtual machine to perform additional diagnostics and troubleshooting steps, such as checking network traffic, analyzing logs, and testing application-level connectivity.
102
+
If you're unable to diagnose or resolve the issue using the diagnostics PowerShell module. You create a subnet without delegation in your Virtual Network and deploy a virtual machine in that subnet. You can then use the virtual machine to perform further diagnostics and troubleshooting steps, such as checking network traffic, analyzing logs, and testing application-level connectivity.
0 commit comments