You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-network/virtual-network-troubleshoot-peering-issues.md
+25-25Lines changed: 25 additions & 25 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,11 +24,11 @@ This troubleshooting guide provides steps to help you resolve most [virtual netw
24
24
25
25

26
26
27
-
## Scenario 1: Configure virtual network peering between two virtual networks
27
+
## Configure virtual network peering between two virtual networks
28
28
29
29
Are the virtual networks in the same subscription or in different subscriptions?
30
30
31
-
### Connection type 1: The virtual networks are in the same subscription
31
+
### The virtual networks are in the same subscription
32
32
33
33
To configure virtual network peering for the virtual networks that are in the same subscription, use the methods in the following articles:
34
34
@@ -50,31 +50,31 @@ To configure virtual network peering for the virtual networks that are in the sa
50
50
51
51
For more information, see the [requirements and constraints](https://docs.microsoft.com/azure/virtual-network/virtual-network-peering-overview#requirements-and-constraints) of global peering.
52
52
53
-
### Connection type 2: The virtual networks are in different subscriptions or Active Directory tenants
53
+
### The virtual networks are in different subscriptions or Active Directory tenants
54
54
55
55
To configure virtual network peering for virtual networks in different subscriptions or Active Directory tenants, see [Create peering in different subscriptions for Azure CLI](https://docs.microsoft.com/azure/virtual-network/create-peering-different-subscriptions#cli).
56
56
57
57
> [!Note]
58
58
> To configure network peering, you must have **Network Contributor** permissions in both subscriptions. For more information, see [Peering permissions](virtual-network-manage-peering.md#permissions).
59
59
60
-
## Scenario 2: Configure virtual network peering with hub-spoke topology that uses on-premises resources
60
+
## Configure virtual network peering with hub-spoke topology that uses on-premises resources
61
61
62
62

63
63
64
-
### Connection type 1: For a site-to-site connection or an ExpressRoute connection
64
+
### For a site-to-site connection or an ExpressRoute connection
65
65
66
66
Follow the steps in: [Configure VPN gateway transit for virtual network peering](https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-peering-gateway-transit?toc=/azure/virtual-network/toc.json).
67
67
68
-
### Connection type 2: For point-to-site connections
68
+
### For point-to-site connections
69
69
70
70
1. Follow the steps in: [Configure VPN gateway transit for virtual network peering](https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-peering-gateway-transit?toc=/azure/virtual-network/toc.json).
71
71
2. After virtual network peering is established or changed, download and reinstall the point-to-site package so that the point-to-site clients get the updated routes to the spoke virtual network.
## Configure virtual network peering with hub-spoke topology virtual network
74
74
75
75

76
76
77
-
### Connection type 1: The virtual networks are in the same region
77
+
### The virtual networks are in the same region
78
78
79
79
80
80
1. In the hub virtual network, configure a network virtual appliance (NVA).
@@ -87,7 +87,7 @@ For more information, see [Service chaining](https://docs.microsoft.com/azure/vi
87
87
88
88
For help with troubleshooting the NVA device setup and routing, see [Network virtual appliance issues in Azure](https://docs.microsoft.com/azure/virtual-network/virtual-network-troubleshoot-nva).
89
89
90
-
### Connection type 2: The virtual networks are in different regions
90
+
### The virtual networks are in different regions
91
91
92
92
Transit over global virtual network peering is now supported. Connectivity does not work over global virtual network peering for the following resources:
93
93
@@ -103,11 +103,11 @@ Transit over global virtual network peering is now supported. Connectivity does
103
103
104
104
To learn more about global peering requirements and restraints, see [Virtual network peering](https://docs.microsoft.com/azure/virtual-network/virtual-network-peering-overview#requirements-and-constraints).
105
105
106
-
## Scenario 4: Troubleshoot a connectivity issue between two peered virtual networks
106
+
## Troubleshoot a connectivity issue between two peered virtual networks
107
107
108
108
Sign in to the [Azure portal](https://portal.azure.com/) with an account that has the necessary [roles and permissions](virtual-network-manage-peering.md#permissions). Select the virtual network, select **Peering**, and then check the **Status** field. What is the status?
109
109
110
-
### Connection type 1: The peering status is "Connected"
110
+
### The peering status is "Connected"
111
111
112
112
To troubleshoot this issue:
113
113
@@ -123,7 +123,7 @@ To troubleshoot this issue:
123
123
1. Start a network trace on the destination VM. For Windows, you can use **Netsh**. For Linux, use **TCPDump**.
124
124
2. Run **TcpPing** or **PsPing** from the source to the destination IP.
125
125
126
-
* This is an example of a **TcpPing** command: `tcping64.exe -t <destination VM address> 3389`
126
+
This is an example of a **TcpPing** command: `tcping64.exe -t <destination VM address> 3389`
127
127
128
128
3. After the **TcpPing** is complete, stop the network trace on the destination.
129
129
4. If packets arrive from the source, there is no networking issue. Examine both the VM firewall and the application listening on that port to locate the configuration issue.
@@ -143,22 +143,22 @@ To troubleshoot this issue:
143
143
144
144
For more information, see the [requirements and constraints](https://docs.microsoft.com/azure/virtual-network/virtual-network-peering-overview#requirements-and-constraints) of global peering.
145
145
146
-
### Connection type 2: The peering status is "Disconnected"
146
+
### The peering status is "Disconnected"
147
147
148
148
To resolve this issue, delete the peering from both virtual networks, and then re-create them.
149
149
150
-
## Scenario 5: Troubleshoot a connectivity issue between a hub-spoke virtual network and an on-premises resource
150
+
## Troubleshoot a connectivity issue between a hub-spoke virtual network and an on-premises resource
151
151
152
152
Does your network use a third-party NVA or VPN gateway?
153
153
154
-
### Connection type 1: My network uses a third-party NVA or VPN gateway
154
+
### My network uses a third-party NVA or VPN gateway
155
155
156
156
To troubleshoot connectivity issues that affect a third-party NVA or VPN gateway, see the following articles:
### Connection type 2: My network does not use a third-party NVA or VPN gateway
161
+
### My network does not use a third-party NVA or VPN gateway
162
162
163
163
Do the hub virtual network and the spoke virtual network have a VPN gateway?
164
164
@@ -182,13 +182,13 @@ For point-to-site connections:
182
182
* On the virtual network that doesn't have a gateway, verify that the **Use remote gateway** check box is selected.
183
183
* Download and reinstall the point-to-site client package. Virtual network routes that are newly peered don't automatically add routes to point-to-site clients.
184
184
185
-
## Scenario 6: Troubleshoot a hub-spoke network connectivity issue between spoke virtual networks in the same region
185
+
## Troubleshoot a hub-spoke network connectivity issue between spoke virtual networks in the same region
186
186
187
187
A hub network must include an NVA. Configure UDRs in spokes that have an NVA set as the next hop, and enable **Allow forwarded traffic** in the hub virtual network.
188
188
189
189
For more information, see [Service chaining](https://docs.microsoft.com/azure/virtual-network/virtual-network-peering-overview#service-chaining), and discuss these requirements with the [NVA vendor](https://support.microsoft.com/help/2984655/support-for-azure-market-place-for-virtual-machines) of your choice.
190
190
191
-
## Scenario 7: Troubleshoot a hub-spoke network connectivity issue between spoke virtual networks in different regions
191
+
## Troubleshoot a hub-spoke network connectivity issue between spoke virtual networks in different regions
192
192
193
193
Transit over global virtual network peering is now supported. Connectivity doesn't work over global virtual network peering for the following resources:
194
194
@@ -204,7 +204,7 @@ Transit over global virtual network peering is now supported. Connectivity doesn
204
204
205
205
For more information, see the [requirements and constraints](https://docs.microsoft.com/azure/virtual-network/virtual-network-peering-overview#requirements-and-constraints) of global peering and [Different VPN Topologies](https://blogs.msdn.microsoft.com/igorpag/2016/02/11/hubspoke-daisy-chain-and-full-mesh-vnet-topologies-in-azure-arm-v2/).
206
206
207
-
## Scenario 8: Troubleshoot a hub-spoke network connectivity issue between a web app and the spoke virtual network
207
+
## Troubleshoot a hub-spoke network connectivity issue between a web app and the spoke virtual network
208
208
209
209
To troubleshoot this issue:
210
210
@@ -214,23 +214,23 @@ To troubleshoot this issue:
214
214
215
215
For more information, see the following articles:
216
216
217
-
*[Integrate your app with an Azure Virtual Network](https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet)
217
+
*[Integrate your app with an Azure virtual network](https://docs.microsoft.com/azure/app-service/web-sites-integrate-with-vnet)
## Troubleshoot a virtual network peering configuration error message
221
221
222
-
### Error 1: Current tenant `<TENANT ID>` isn't authorized to access linked subscription
222
+
### Current tenant `<TENANT ID>` isn't authorized to access linked subscription
223
223
224
224
To resolve this issue, see [Create peering - Azure CLI](https://docs.microsoft.com/azure/virtual-network/create-peering-different-subscriptions#cli).
225
225
226
-
### Error 2: Not connected
226
+
### Not connected
227
227
228
228
To resolve this issue, delete the peering from both virtual networks, and then recreate them.
229
229
230
-
### Error 3: Failed to peer a Databricks virtual network
230
+
### Failed to peer a Databricks virtual network
231
231
232
232
To resolve this issue, configure the virtual network peering under **Azure Databricks**, and then specify the target virtual network by using **Resource ID**. For more information, see [Peer a Databricks virtual network to a remote virtual network](https://docs.azuredatabricks.net/administration-guide/cloud-configurations/azure/vnet-peering.html#id2).
233
233
234
234
## Next steps
235
235
236
-
*[Troubleshooting connectivity problems between Azure VMs](https://docs.microsoft.com/azure/virtual-network/virtual-network-troubleshoot-connectivity-problem-between-vms)
236
+
*[Troubleshooting connectivity problems between Azure VMs](https://docs.microsoft.com/azure/virtual-network/virtual-network-troubleshoot-connectivity-problem-between-vms)
0 commit comments