Skip to content

Commit de9cbf8

Browse files
Merge pull request #252864 from halkazwini/nw-routing2
Updates
2 parents 9a23859 + a2337f4 commit de9cbf8

File tree

1 file changed

+37
-39
lines changed

1 file changed

+37
-39
lines changed

articles/network-watcher/diagnose-vm-network-routing-problem.md

Lines changed: 37 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -2,19 +2,18 @@
22
title: 'Tutorial: Diagnose a VM network routing problem - Azure portal'
33
titleSuffix: Azure Network Watcher
44
description: In this tutorial, you learn how to diagnose a virtual machine network routing problem using the next hop capability of Azure Network Watcher.
5-
services: network-watcher
65
author: halkazwini
76
ms.author: halkazwini
87
ms.service: network-watcher
98
ms.topic: tutorial
10-
ms.date: 02/28/2023
11-
ms.custom: template-tutorial, mvc, engagement-fy23
12-
# Customer intent: I want to diagnose virtual machine (VM) network routing problem that prevents communication to different destinations.
9+
ms.date: 09/26/2023
10+
11+
# CustomerIntent: As an Azure administrator, I want to diagnose virtual machine (VM) network routing problem that prevents it from communicating with the internet.
1312
---
1413

1514
# Tutorial: Diagnose a virtual machine network routing problem using the Azure portal
1615

17-
When you deploy a virtual machine (VM), Azure creates several [system default routes](/azure/virtual-network/virtual-networks-udr-overview#system-routes?toc=%2Fazure%2Fnetwork-watcher%2Ftoc.json&tabs=json) for it. You can create [custom routes](/azure/virtual-network/virtual-networks-udr-overview#custom-routes?toc=%2Fazure%2Fnetwork-watcher%2Ftoc.json&tabs=json) to override some of Azure's system routes. Sometimes, a custom route can result in a VM not being able to communicate with the intended destination. You can use Azure Network Watcher [next hop](network-watcher-next-hop-overview.md) capability to troubleshoot and diagnose the VM routing problem that's preventing it from correctly communicating with other resources.
16+
In this tutorial, You use Azure Network Watcher [next hop](network-watcher-next-hop-overview.md) tool to troubleshoot and diagnose a VM routing problem that's preventing it from correctly communicating with other resources. Next hop shows you that the routing problem is caused by a [custom route](../virtual-network/virtual-networks-udr-overview.md#custom-routes).
1817

1918
In this tutorial, you learn how to:
2019

@@ -26,21 +25,19 @@ In this tutorial, you learn how to:
2625
> * Create a custom route
2726
> * Diagnose a routing problem
2827
29-
If you prefer, you can diagnose a virtual machine network routing problem using the [Azure CLI](diagnose-vm-network-routing-problem-cli.md) or [Azure PowerShell](diagnose-vm-network-routing-problem-powershell.md) tutorials.
28+
If you prefer, you can diagnose a virtual machine network routing problem using the [Azure CLI](diagnose-vm-network-routing-problem-cli.md) or [Azure PowerShell](diagnose-vm-network-routing-problem-powershell.md) versions of the tutorial.
3029

3130
## Prerequisites
3231

3332
- An Azure account with an active subscription. If you don't have one, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
3433

35-
## Sign in to Azure
36-
37-
Sign in to the [Azure portal](https://portal.azure.com).
38-
3934
## Create a virtual network
4035

4136
In this section, you create a virtual network.
4237

43-
1. In the search box at the top of the portal, enter *virtual networks*. Select **Virtual networks** in the search results.
38+
1. Sign in to the [Azure portal](https://portal.azure.com).
39+
40+
1. In the search box at the top of the portal, enter ***virtual networks***. Select **Virtual networks** in the search results.
4441

4542
:::image type="content" source="./media/diagnose-vm-network-routing-problem/virtual-network-azure-portal.png" alt-text="Screenshot shows searching for virtual networks in the Azure portal.":::
4643

@@ -50,9 +47,9 @@ In this section, you create a virtual network.
5047
| --- | --- |
5148
| **Project Details** | |
5249
| Subscription | Select your Azure subscription. |
53-
| Resource Group | Select **Create new**. </br> Enter *myResourceGroup* in **Name**. </br> Select **OK**. |
50+
| Resource Group | Select **Create new**. </br> Enter ***myResourceGroup*** in **Name**. </br> Select **OK**. |
5451
| **Instance details** | |
55-
| Name | Enter *myVNet*. |
52+
| Name | Enter ***myVNet***. |
5653
| Region | Select **East US**. |
5754

5855
1. Select the **IP Addresses** tab, or select **Next: IP Addresses** button at the bottom of the page.
@@ -61,19 +58,19 @@ In this section, you create a virtual network.
6158

6259
| Setting | Value |
6360
| --- | --- |
64-
| IPv4 address space | Enter *10.0.0.0/16*. |
65-
| Subnet name | Enter *mySubnet*. |
66-
| Subnet address range | Enter *10.0.0.0/24*. |
61+
| IPv4 address space | Enter ***10.0.0.0/16***. |
62+
| Subnet name | Enter ***mySubnet***. |
63+
| Subnet address range | Enter ***10.0.0.0/24***. |
6764

6865
1. Select the **Security** tab, or select the **Next: Security** button at the bottom of the page.
6966

7067
1. Under **BastionHost**, select **Enable** and enter the following values:
7168

7269
| Setting | Value |
7370
| --- | --- |
74-
| Bastion name | Enter *myBastionHost*. |
75-
| AzureBastionSubnet address space | Enter *10.0.3.0/24*. |
76-
| Public IP Address | Select **Create new**. </br> Enter *myBastionIP* for **Name**. </br> Select **OK**. |
71+
| Bastion name | Enter ***myBastionHost***. |
72+
| AzureBastionSubnet address space | Enter ***10.0.3.0/24***. |
73+
| Public IP Address | Select **Create new**. </br> Enter ***myBastionIP*** for **Name**. </br> Select **OK**. |
7774

7875
1. Select the **Review + create** tab or select the **Review + create** button.
7976

@@ -85,7 +82,7 @@ In this section, you create two virtual machines: **myVM** and **myNVA**. You us
8582

8683
### Create first virtual machine
8784

88-
1. In the search box at the top of the portal, enter *virtual machines*. Select **Virtual machines** in the search results.
85+
1. In the search box at the top of the portal, enter ***virtual machines***. Select **Virtual machines** in the search results.
8986

9087
2. Select **+ Create** and then select **Azure virtual machine**.
9188

@@ -97,7 +94,7 @@ In this section, you create two virtual machines: **myVM** and **myNVA**. You us
9794
| Subscription | Select your Azure subscription. |
9895
| Resource Group | Select **myResourceGroup**. |
9996
| **Instance details** | |
100-
| Virtual machine name | Enter *myVM*. |
97+
| Virtual machine name | Enter ***myVM***. |
10198
| Region | Select **(US) East US**. |
10299
| Availability Options | Select **No infrastructure redundancy required**. |
103100
| Security type | Select **Standard**. |
@@ -139,13 +136,13 @@ In this section, you create two virtual machines: **myVM** and **myNVA**. You us
139136

140137
### Create second virtual machine
141138

142-
Follow the previous steps that you used to create **myVM** virtual machine and enter *myNVA* for the virtual machine name.
139+
Follow the previous steps that you used to create **myVM** virtual machine and enter ***myNVA*** for the virtual machine name.
143140

144141
## Test network communication using Network Watcher next hop
145142

146143
Use the next hop capability of Network Watcher to determine which route Azure is using to route traffic from **myVM**, which has one network interface with one IP configuration
147144

148-
1. In the search box at the top of the portal, enter *network watcher*. Select **Network Watcher** in the search results.
145+
1. In the search box at the top of the portal, enter ***network watcher***. Select **Network Watcher** in the search results.
149146

150147
1. Under **Network diagnostic tools**, select **Next hop**. Enter or select the following values:
151148

@@ -155,8 +152,8 @@ Use the next hop capability of Network Watcher to determine which route Azure is
155152
| Resource group | Select **myResourceGroup**. |
156153
| Virtual machine | Select **myVM**. |
157154
| Network interface | Leave the default. |
158-
| Source IP address | Enter *10.0.0.4* or the IP of your VM if it's different. |
159-
| Destination IP address | Enter *13.107.21.200* to test the communication to `www.bing.com`. |
155+
| Source IP address | Enter ***10.0.0.4*** or the IP of your VM if it's different. |
156+
| Destination IP address | Enter ***13.107.21.200*** to test the communication to `www.bing.com`. |
160157

161158
1. Select **Next hop** button to start the test. The test result shows information about the next hop like the next hop type, its IP address, and the route table ID used to route traffic. The result of testing **13.107.21.200** shows that the next hop type is **Internet** and the route table ID is **System Route** which means traffic destined to `www.bing.com` from **myVM** is routed to the internet using Azure default system route.
162159

@@ -174,7 +171,7 @@ Use the next hop capability of Network Watcher to determine which route Azure is
174171

175172
To further analyze routing, review the effective routes for **myVM** network interface.
176173

177-
1. In the search box at the top of the portal, enter *virtual machines*. Select **Virtual machines** in the search results.
174+
1. In the search box at the top of the portal, enter ***virtual machines***. Select **Virtual machines** in the search results.
178175

179176
1. Under **Settings**, select **Networking**, then select the network interface.
180177

@@ -198,7 +195,7 @@ Next, you create a static custom route to override Azure default system routes a
198195

199196
In this section, you create a static custom route (user-defined route) in a route table that forces all traffic destined outside the virtual network to a specific IP address. Forcing traffic to a virtual network appliance is a common scenario.
200197

201-
1. In the search box at the top of the portal, enter *route tables*. Select **Route tables** in the search results.
198+
1. In the search box at the top of the portal, enter ***route tables***. Select **Route tables** in the search results.
202199

203200
1. Select **+ Create** to create a new route table. In the **Create Route table** page, enter or select the following values:
204201

@@ -209,7 +206,7 @@ In this section, you create a static custom route (user-defined route) in a rout
209206
| Resource group | Select **myResourceGroup**. |
210207
| **Instance Details** | |
211208
| Region | Select **East US**. |
212-
| Name | Enter *myRouteTable*. |
209+
| Name | Enter ***myRouteTable***. |
213210
| Propagate gateway routes | Leave the default. |
214211

215212
1. Select **Review + create**.
@@ -224,11 +221,11 @@ In this section, you create a static custom route (user-defined route) in a rout
224221

225222
| Setting | Value |
226223
| ------- | ------ |
227-
| Route name | Enter *myRoute*. |
224+
| Route name | Enter ***myRoute***. |
228225
| Address prefix destination | Select **IP Addresses**. |
229-
| Destination IP addresses/CIDR ranges | Enter *0.0.0.0/0*. |
226+
| Destination IP addresses/CIDR ranges | Enter ***0.0.0.0/0***. |
230227
| Next hop type | Select **Virtual appliance**. |
231-
| next hop address | Enter *10.0.0.5*. |
228+
| next hop address | Enter ***10.0.0.5***. |
232229

233230
1. Select **Add**.
234231

@@ -272,18 +269,19 @@ The custom route with prefix 0.0.0.0/0 overrode Azure default route and caused a
272269
273270
## Clean up resources
274271

275-
When no longer needed, delete the resource group and all of the resources it contains:
272+
When no longer needed, delete **myResourceGroup** resource group and all of the resources it contains:
273+
274+
1. In the search box at the top of the portal, enter ***myResourceGroup***. Select **myResourceGroup** from the search results.
275+
276+
1. Select **Delete resource group**.
276277

277-
1. Enter *myResourceGroup* in the search box at the top of the portal. When you see **myResourceGroup** in the search results, select it.
278-
2. Select **Delete resource group**.
279-
3. Enter *myResourceGroup* for **TYPE THE RESOURCE GROUP NAME:** and select **Delete**.
278+
1. In **Delete a resource group**, enter ***myResourceGroup***, and then select **Delete**.
280279

281-
## Next steps
280+
1. Select **Delete** to confirm the deletion of the resource group and all its resources.
282281

283-
In this tutorial, you created a virtual machine and used Network Watcher next hop to diagnose routing to different destinations. To learn more about routing in Azure, see [Virtual network traffic routing](../virtual-network/virtual-networks-udr-overview.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json).
282+
## Next step
284283

285-
For outbound VM connections, you can use Network Watcher [connection troubleshoot](network-watcher-connectivity-portal.md) capability to determine the latency, allowed and denied network traffic between the VM and an endpoint, and the route to an endpoint.
284+
To learn how to monitor communication between two virtual machines, advance to the next tutorial:
286285

287-
To learn how to monitor communication between two virtual machines, advance to the next tutorial.
288286
> [!div class="nextstepaction"]
289287
> [Monitor a network connection](monitor-vm-communication.md)

0 commit comments

Comments
 (0)