@@ -36,11 +36,11 @@ Go over the steps listed below to make sure all the usual configurations are as
36
36
37
37
a) Go to ** Private Link Center**
38
38
39
- ![ Private Link Center] ( ./media/private-endpoint-tsg/private-link-center.png )
39
+ ![ Private Link Center] ( ./media/private-endpoint-tsg/private-link-center.png )
40
40
41
41
b) Select Private Endpoints from the left navigation pane
42
42
43
- ![ Private Endpoints] ( ./media/private-endpoint-tsg/private-endpoints.png )
43
+ ![ Private Endpoints] ( ./media/private-endpoint-tsg/private-endpoints.png )
44
44
45
45
c) Filter and select the private endpoint that you want to diagnose
46
46
@@ -50,34 +50,34 @@ Go over the steps listed below to make sure all the usual configurations are as
50
50
- Make sure the VM has connectivity to the VNet hosting the Private Endpoints
51
51
- FQDN information (copy) and Private IP address assigned
52
52
53
- ![ VNet and DNS Configuration] ( ./media/private-endpoint-tsg/vnet-dns-configuration.png )
53
+ ![ VNet and DNS Configuration] ( ./media/private-endpoint-tsg/vnet-dns-configuration.png )
54
54
55
55
2 . Use [ ** Azure Monitor** ] ( https://docs.microsoft.com/azure/azure-monitor/overview ) to review data is flowing
56
56
57
57
a) On Private Endpoint resource, select ** Monitor**
58
58
- Select data-in or data-out and review if the data is flowing when attempting to connect to the Private Endpoint. Expect a delay of approx. 10 mins.
59
59
60
- ![ Verify Private Endpoint Telemetry] ( ./media/private-endpoint-tsg/private-endpoint-monitor.png )
60
+ ![ Verify Private Endpoint Telemetry] ( ./media/private-endpoint-tsg/private-endpoint-monitor.png )
61
61
62
62
3 . Use VM Connection Troubleshoot from ** Network Watcher**
63
63
64
64
a) Select the client VM
65
65
66
66
b) Select the ** Connection troubleshoot** section, ** Outbound connection** tab
67
67
68
- ![ Network Watcher - Test outbound connections] ( ./media/private-endpoint-tsg/network-watcher-outbound-connection.png )
68
+ ![ Network Watcher - Test outbound connections] ( ./media/private-endpoint-tsg/network-watcher-outbound-connection.png )
69
69
70
70
c) Select ** Use Network Watcher for detail connection tracing**
71
71
72
- ![ Network Watcher - Connection troubleshoot] ( ./media/private-endpoint-tsg/network-watcher-connection-troubleshoot.png )
72
+ ![ Network Watcher - Connection troubleshoot] ( ./media/private-endpoint-tsg/network-watcher-connection-troubleshoot.png )
73
73
74
74
d) Select ** Test by FQDN**
75
75
- Paste the FQDN from the Private Endpoint resource
76
76
- Provide a port (* typically 443 for Azure Storage or COSMOS, 1336 for Sql ...* )
77
77
78
78
e) Click ** Test** and validate the test results
79
79
80
- ![ Network Watcher - test results] ( ./media/private-endpoint-tsg/network-watcher-test-results.png )
80
+ ![ Network Watcher - test results] ( ./media/private-endpoint-tsg/network-watcher-test-results.png )
81
81
82
82
83
83
4 . DNS resolution from the test results must have the same private IP address assigned to the Private Endpoint
@@ -94,7 +94,7 @@ Go over the steps listed below to make sure all the usual configurations are as
94
94
b) If connectivity is failing because of NSG/UDRs
95
95
- Review NSG outbound rules and create appropriate outbound rules to allow traffic
96
96
97
- ![ NSG outbound rules] ( ./media/private-endpoint-tsg/nsg-outbound-rules.png )
97
+ ![ NSG outbound rules] ( ./media/private-endpoint-tsg/nsg-outbound-rules.png )
98
98
99
99
5 . If the connection has validated results, the connectivity issue might be related to other aspects like secrets, tokens, passwords at the application layer.
100
100
- In this case, review configuration of the Private Link resource associated with the private endpoint. Refer to [ Private Link troubleshooting guide] ( https://docs.microsoft.com/azure/private-link/private-link-connectivity-troubleshooting ) .
0 commit comments