You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -84,8 +84,6 @@ You can associate an ASG with a private endpoint when it's created. The followin
84
84
|**Application security group**||
85
85
| Application security group | Select **myASG**. |
86
86
87
-
:::image type="content" source="./media/configure-asg-private-endpoint/asg-new-endpoint.png" alt-text="Screenshot that shows ASG selection when creating a new private endpoint.":::
88
-
89
87
1. Select **Next: DNS** at the bottom of the page.
90
88
91
89
1. Select **Next: Tags** at the bottom of the page.
@@ -171,8 +169,6 @@ You can associate an ASG with an existing private endpoint. The following proced
171
169
172
170
1. In **Application security groups**, select **myASG** in the dropdown box.
173
171
174
-
:::image type="content" source="./media/configure-asg-private-endpoint/asg-existing-endpoint.png" alt-text="Screenshot that shows ASG selection when associating with an existing private endpoint.":::
@@ -31,12 +31,8 @@ Review these steps to make sure all the usual configurations are as expected to
31
31
1. Review private endpoint configuration by browsing the resource.
32
32
33
33
a. Go to [Private Link Center](https://portal.azure.com/#blade/Microsoft_Azure_Network/PrivateLinkCenterBlade/overview).
34
-
35
-
:::image type="content" source="./media/private-endpoint-tsg/private-link-center.png" alt-text="Screenshot of Private Link Center.":::
36
34
37
35
b. On the left pane, select **Private endpoints**.
38
-
39
-
:::image type="content" source="./media/private-endpoint-tsg/private-endpoints.png" alt-text="Screenshot of private endpoints.":::
40
36
41
37
c. Filter and select the private endpoint that you want to diagnose.
42
38
@@ -47,8 +43,6 @@ Review these steps to make sure all the usual configurations are as expected to
47
43
- Make sure the VM has connectivity to the virtual network that hosts the private endpoints.
48
44
49
45
- Check that the FQDN information (copy) and Private IP address are assigned.
50
-
51
-
:::image type="content" source="./media/private-endpoint-tsg/vnet-dns-configuration.png" alt-text="Screenshot of virtual network and DNS configuration.":::
52
46
53
47
1. Use [Azure Monitor](/azure/azure-monitor/overview) to see if data is flowing.
54
48
@@ -57,30 +51,22 @@ Review these steps to make sure all the usual configurations are as expected to
57
51
- Select **Bytes In** or **Bytes Out**.
58
52
59
53
- See if data is flowing when you attempt to connect to the private endpoint. Expect a delay of approximately 10 minutes.
60
-
61
-
:::image type="content" source="./media/private-endpoint-tsg/private-endpoint-monitor.png" alt-text="Screenshot of verify private endpoint monitor.":::
62
54
63
55
1. Use **VM Connection troubleshoot** from Azure Network Watcher.
64
56
65
57
a. Select the client VM.
66
58
67
59
b. Select **Connection troubleshoot**, and then select the **Outbound connections** tab.
68
60
69
-
:::image type="content" source="./media/private-endpoint-tsg/network-watcher-outbound-connection.png" alt-text="Screenshot of Network Watcher - Test outbound connections.":::
70
-
71
61
c. Select **Use Network Watcher for detailed connection tracing**.
72
-
73
-
:::image type="content" source="./media/private-endpoint-tsg/network-watcher-connection-troubleshoot.png" alt-text="Screenshot of Network Watcher - Connection troubleshoot.":::
74
62
75
63
d. Select **Test by FQDN**.
76
64
77
65
- Paste the FQDN from the private endpoint resource.
78
66
79
67
- Provide a port. Typically, use 443 for Azure Storage or Azure Cosmos DB and 1336 for SQL.
80
68
81
-
e. Select **Test**, and validate the test results.
82
-
83
-
:::image type="content" source="./media/private-endpoint-tsg/network-watcher-test-results.png" alt-text="Screenshot of Network Watcher - Test results.":::
69
+
e. Select **Test**, and validate the test results.
84
70
85
71
1. DNS resolution from the test results must have the same private IP address assigned to the private endpoint.
86
72
@@ -100,8 +86,6 @@ Review these steps to make sure all the usual configurations are as expected to
100
86
b. If connectivity is failing because of network security groups (NSGs) or user-defined routes:
101
87
- Review the NSG outbound rules, and create the appropriate outbound rules to allow traffic.
102
88
103
-
:::image type="content" source="./media/private-endpoint-tsg/nsg-outbound-rules.png" alt-text="Screenshot of NSG outbound rules.":::
104
-
105
89
1. Source virtual machine should have the route to private endpoint IP next hop as InterfaceEndpoints in the network interface effective routes.
106
90
107
91
a. If you aren't able to see the private endpoint route in the source VM, check if
Copy file name to clipboardExpand all lines: articles/private-link/tutorial-dns-on-premises-private-resolver.md
+1-5Lines changed: 1 addition & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: abell
6
6
ms.author: abell
7
7
ms.service: azure-private-link
8
8
ms.topic: tutorial
9
-
ms.date: 08/29/2023
9
+
ms.date: 02/18/2025
10
10
ms.custom: template-tutorial
11
11
---
12
12
@@ -235,16 +235,12 @@ In this section, you use the virtual machine you created in the previous step to
235
235
236
236
9. Verify you receive the default web app page.
237
237
238
-
:::image type="content" source="./media/tutorial-dns-on-premises-private-resolver/web-app-default-page.png" alt-text="Screenshot of Microsoft Edge showing default web app page." border="true":::
239
-
240
238
10. Close the connection to **vm-1**.
241
239
242
240
11. Open a web browser on your local computer and enter the URL of your web app, `https://<webapp-name>.azurewebsites.net`.
243
241
244
242
12. Verify that you receive a **403** page. This page indicates that the web app isn't accessible externally.
245
243
246
-
:::image type="content" source="./media/tutorial-dns-on-premises-private-resolver/web-app-ext-403.png" alt-text="Screenshot of web browser showing a blue page with Error 403 for external web app address." border="true":::
0 commit comments