Skip to content

Commit 8cf060f

Browse files
committed
introduction tweak
1 parent 5fb168f commit 8cf060f

File tree

1 file changed

+2
-15
lines changed

1 file changed

+2
-15
lines changed

articles/network-watcher/diagnose-vm-network-routing-problem.md

Lines changed: 2 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -19,25 +19,23 @@ When you deploy a virtual machine (VM), Azure creates several [system default ro
1919
In this tutorial, you learn how to:
2020

2121
> [!div class="checklist"]
22-
> * Create a virtual network and deploy two virtual machines in it
22+
> * Create a virtual network and a Bastion host
23+
> * Create two virtual machines
2324
> * Test communication to different IPs using the next hop capability of Azure Network Watcher
2425
> * View the effective routes
2526
> * Create a custom route
2627
> * Diagnose a routing problem
2728
2829
If you prefer, you can diagnose a virtual machine network routing problem using the [Azure CLI](diagnose-vm-network-routing-problem-cli.md) or [Azure PowerShell](diagnose-vm-network-routing-problem-powershell.md) tutorials.
2930

30-
3131
## Prerequisites
3232

3333
- An Azure account with an active subscription. If you don't have one, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
3434

35-
3635
## Sign in to Azure
3736

3837
Sign in to the [Azure portal](https://portal.azure.com).
3938

40-
4139
## Create a virtual network
4240

4341
In this section, you create a virtual network.
@@ -81,12 +79,10 @@ In this section, you create a virtual network.
8179

8280
1. Review the settings, and then select **Create**.
8381

84-
8582
## Create virtual machines
8683

8784
In this section, you create two virtual machines: **myVM** and **myNVA**. You use **myVM** virtual machine to test the communication from. **myNVA** virtual machine is used as a network virtual appliance in the scenario.
8885

89-
9086
### Create first virtual machine
9187

9288
1. In the search box at the top of the portal, enter *virtual machine*. Select **Virtual machines** in the search results.
@@ -141,12 +137,10 @@ In this section, you create two virtual machines: **myVM** and **myNVA**. You us
141137

142138
:::image type="content" source="./media/diagnose-vm-network-routing-problem/bing-allowed.png" alt-text="Screenshot showing Bing page in a web browser.":::
143139

144-
145140
### Create second virtual machine
146141

147142
Follow the previous steps that you used to create **myVM** virtual machine and enter *myNVA* for the virtual machine name.
148143

149-
150144
## Test network communication using Network Watcher next hop
151145

152146
Use the next hop capability of Network Watcher to determine which route Azure is using to route traffic from **myVM**, which has one network interface with one IP configuration
@@ -176,7 +170,6 @@ Use the next hop capability of Network Watcher to determine which route Azure is
176170

177171
:::image type="content" source="./media/diagnose-vm-network-routing-problem/next-hop-none-system-route.png" alt-text="Screenshot showing Network Watcher next hop result when testing with a private IP outside the address space of the virtual network.":::
178172

179-
180173
## View details of a route
181174

182175
To further analyze routing, review the effective routes for **myVM** network interface.
@@ -197,12 +190,10 @@ To further analyze routing, review the effective routes for **myVM** network int
197190

198191
However, when you ran the test using **10.1.0.5**, the result was **None** for the next hop type because this IP address is in the 10.0.0.0/8 address space. Azure default route for 10.0.0.0/8 address prefix has next hope type as **None**. If you add an address prefix that contains 10.1.0.5 to the virtual network address space, then the next hop type for 10.1.0.5 will change from **None** to **VirtualNetwork**.
199192

200-
201193
## Test a routing problem due to custom routes
202194

203195
Next, you create a static custom route to override Azure default system routes and cause a routing problem to **myVM** virtual machine that prevents it from directly communicating with `www.bing.com`. Then, you'll use Network Watcher next hop to troubleshoot and diagnose the problem.
204196

205-
206197
### Create a custom route
207198

208199
In this section, you create a static custom route (user-defined route) in a route table that forces all traffic destined outside the virtual network to a specific IP address. Forcing traffic to a virtual network appliance is a common scenario.
@@ -241,7 +232,6 @@ In this section, you create a static custom route (user-defined route) in a rout
241232

242233
1. Select **Add**.
243234

244-
245235
### Associate the route table with the subnet
246236

247237
In this section, you associate the route table that you created in the previous section with **mySubnet** subnet.
@@ -257,14 +247,12 @@ In this section, you associate the route table that you created in the previous
257247

258248
1. Select **OK**.
259249

260-
261250
### Go to `www.bing.com`
262251

263252
In **myVM**, open the web browser and go to `www.bing.com` to verify if it's still reachable. The custom route that you created and associated with subnet of **myVM** forces the traffic to go to **myNVA**. The traffic is dropped as **myNVA** isn't set up to forward the traffic for the purposes of this tutorial to demonstrate a routing problem.
264253

265254
:::image type="content" source="./media/diagnose-vm-network-routing-problem/bing-blocked.png" alt-text="Screenshot showing Bing page isn't reachable in a web browser.":::
266255

267-
268256
### Test network communication using next hop
269257

270258
Repeat the steps you used in [Test network communication using Network Watcher next hop](#test-network-communication-using-network-watcher-next-hop) section using **13.107.21.200** to test the communication to `www.bing.com`.
@@ -282,7 +270,6 @@ The custom route with prefix 0.0.0.0/0 overrode Azure default route and caused a
282270
> [!NOTE]
283271
> In this tutorial, traffic to `www.bing.com` was dropped because **myNVA** was not set up to forward traffic. To learn how to set up a virtual machine to forward traffic, see [Turn on IP forwarding](/articles/virtual-network/tutorial-create-route-table-portal.md#turn-on-ip-forwarding).
284272
285-
286273
## Clean up resources
287274

288275
When no longer needed, delete the resource group and all of the resources it contains:

0 commit comments

Comments
 (0)