You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/diagnose-vm-network-routing-problem.md
+2-15Lines changed: 2 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,25 +19,23 @@ When you deploy a virtual machine (VM), Azure creates several [system default ro
19
19
In this tutorial, you learn how to:
20
20
21
21
> [!div class="checklist"]
22
-
> * Create a virtual network and deploy two virtual machines in it
22
+
> * Create a virtual network and a Bastion host
23
+
> * Create two virtual machines
23
24
> * Test communication to different IPs using the next hop capability of Azure Network Watcher
24
25
> * View the effective routes
25
26
> * Create a custom route
26
27
> * Diagnose a routing problem
27
28
28
29
If you prefer, you can diagnose a virtual machine network routing problem using the [Azure CLI](diagnose-vm-network-routing-problem-cli.md) or [Azure PowerShell](diagnose-vm-network-routing-problem-powershell.md) tutorials.
29
30
30
-
31
31
## Prerequisites
32
32
33
33
- An Azure account with an active subscription. If you don't have one, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
34
34
35
-
36
35
## Sign in to Azure
37
36
38
37
Sign in to the [Azure portal](https://portal.azure.com).
39
38
40
-
41
39
## Create a virtual network
42
40
43
41
In this section, you create a virtual network.
@@ -81,12 +79,10 @@ In this section, you create a virtual network.
81
79
82
80
1. Review the settings, and then select **Create**.
83
81
84
-
85
82
## Create virtual machines
86
83
87
84
In this section, you create two virtual machines: **myVM** and **myNVA**. You use **myVM** virtual machine to test the communication from. **myNVA** virtual machine is used as a network virtual appliance in the scenario.
88
85
89
-
90
86
### Create first virtual machine
91
87
92
88
1. In the search box at the top of the portal, enter *virtual machine*. Select **Virtual machines** in the search results.
@@ -141,12 +137,10 @@ In this section, you create two virtual machines: **myVM** and **myNVA**. You us
141
137
142
138
:::image type="content" source="./media/diagnose-vm-network-routing-problem/bing-allowed.png" alt-text="Screenshot showing Bing page in a web browser.":::
143
139
144
-
145
140
### Create second virtual machine
146
141
147
142
Follow the previous steps that you used to create **myVM** virtual machine and enter *myNVA* for the virtual machine name.
148
143
149
-
150
144
## Test network communication using Network Watcher next hop
151
145
152
146
Use the next hop capability of Network Watcher to determine which route Azure is using to route traffic from **myVM**, which has one network interface with one IP configuration
@@ -176,7 +170,6 @@ Use the next hop capability of Network Watcher to determine which route Azure is
176
170
177
171
:::image type="content" source="./media/diagnose-vm-network-routing-problem/next-hop-none-system-route.png" alt-text="Screenshot showing Network Watcher next hop result when testing with a private IP outside the address space of the virtual network.":::
178
172
179
-
180
173
## View details of a route
181
174
182
175
To further analyze routing, review the effective routes for **myVM** network interface.
@@ -197,12 +190,10 @@ To further analyze routing, review the effective routes for **myVM** network int
197
190
198
191
However, when you ran the test using **10.1.0.5**, the result was **None** for the next hop type because this IP address is in the 10.0.0.0/8 address space. Azure default route for 10.0.0.0/8 address prefix has next hope type as **None**. If you add an address prefix that contains 10.1.0.5 to the virtual network address space, then the next hop type for 10.1.0.5 will change from **None** to **VirtualNetwork**.
199
192
200
-
201
193
## Test a routing problem due to custom routes
202
194
203
195
Next, you create a static custom route to override Azure default system routes and cause a routing problem to **myVM** virtual machine that prevents it from directly communicating with `www.bing.com`. Then, you'll use Network Watcher next hop to troubleshoot and diagnose the problem.
204
196
205
-
206
197
### Create a custom route
207
198
208
199
In this section, you create a static custom route (user-defined route) in a route table that forces all traffic destined outside the virtual network to a specific IP address. Forcing traffic to a virtual network appliance is a common scenario.
@@ -241,7 +232,6 @@ In this section, you create a static custom route (user-defined route) in a rout
241
232
242
233
1. Select **Add**.
243
234
244
-
245
235
### Associate the route table with the subnet
246
236
247
237
In this section, you associate the route table that you created in the previous section with **mySubnet** subnet.
@@ -257,14 +247,12 @@ In this section, you associate the route table that you created in the previous
257
247
258
248
1. Select **OK**.
259
249
260
-
261
250
### Go to `www.bing.com`
262
251
263
252
In **myVM**, open the web browser and go to `www.bing.com` to verify if it's still reachable. The custom route that you created and associated with subnet of **myVM** forces the traffic to go to **myNVA**. The traffic is dropped as **myNVA** isn't set up to forward the traffic for the purposes of this tutorial to demonstrate a routing problem.
264
253
265
254
:::image type="content" source="./media/diagnose-vm-network-routing-problem/bing-blocked.png" alt-text="Screenshot showing Bing page isn't reachable in a web browser.":::
266
255
267
-
268
256
### Test network communication using next hop
269
257
270
258
Repeat the steps you used in [Test network communication using Network Watcher next hop](#test-network-communication-using-network-watcher-next-hop) section using **13.107.21.200** to test the communication to `www.bing.com`.
@@ -282,7 +270,6 @@ The custom route with prefix 0.0.0.0/0 overrode Azure default route and caused a
282
270
> [!NOTE]
283
271
> In this tutorial, traffic to `www.bing.com` was dropped because **myNVA** was not set up to forward traffic. To learn how to set up a virtual machine to forward traffic, see [Turn on IP forwarding](/articles/virtual-network/tutorial-create-route-table-portal.md#turn-on-ip-forwarding).
284
272
285
-
286
273
## Clean up resources
287
274
288
275
When no longer needed, delete the resource group and all of the resources it contains:
0 commit comments