You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/diagnose-vm-network-routing-problem.md
+15-14Lines changed: 15 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,7 +42,7 @@ Sign in to the [Azure portal](https://portal.azure.com).
42
42
43
43
## Create a virtual network
44
44
45
-
In this section, you'll create a virtual network (VNet).
45
+
In this section, you create a virtual network.
46
46
47
47
1. In the search box at the top of the portal, enter *virtual network*. Select **Virtual networks** in the search results.
48
48
@@ -84,7 +84,7 @@ In this section, you'll create a virtual network (VNet).
84
84
85
85
## Create virtual machines
86
86
87
-
In this section, you'll create two virtual machines: **myVM** and **myNVA**. You'll use **myVM** virtual machine to test the communication from. **myNVA** virtual machine will be used as a network virtual appliance in the scenario.
87
+
In this section, you create two virtual machines: **myVM** and **myNVA**. You use **myVM** virtual machine to test the communication from. **myNVA** virtual machine is used as a network virtual appliance in the scenario.
88
88
89
89
90
90
### Create first virtual machine
@@ -144,7 +144,7 @@ In this section, you'll create two virtual machines: **myVM** and **myNVA**. You
144
144
145
145
### Create second virtual machine
146
146
147
-
Follow the steps that you used to create **myVM** virtual machine and enter *myNVA* for the virtual machine name.
147
+
Follow the previous steps that you used to create **myVM** virtual machine and enter *myNVA* for the virtual machine name.
148
148
149
149
150
150
## Test network communication using Network Watcher next hop
@@ -153,7 +153,7 @@ Use the next hop capability of Network Watcher to determine which route Azure is
153
153
154
154
1. In the search box at the top of the portal, enter *network watcher*. Select **Network Watcher** in the search results.
155
155
156
-
1. Under **Network diagnostic tools**, select **Next hop**. Enter or select the following:
156
+
1. Under **Network diagnostic tools**, select **Next hop**. Enter or select the following information:
157
157
158
158
| Setting | Value |
159
159
| ------- | ------ |
@@ -162,7 +162,7 @@ Use the next hop capability of Network Watcher to determine which route Azure is
162
162
| Virtual machine | Select **myVM**. |
163
163
| Network interface | Leave the default. |
164
164
| Source IP address | Enter *10.0.0.4* or the IP of your VM if it's different. |
165
-
| Destination IP address | Enter *13.107.21.200* to test the communication to **`www.bing.com`**. |
165
+
| Destination IP address | Enter *13.107.21.200* to test the communication to `www.bing.com`. |
166
166
167
167
1. Select **Next hop** button to start the test. The test result shows information about the next hop like the next hop type, its IP address, and the route table ID used to route traffic. The result of testing **13.107.21.200** shows that the next hop type is **Internet** and the route table ID is **System Route** which means traffic destined to `www.bing.com` from **myVM** is routed to the internet using Azure default system route.
168
168
@@ -200,12 +200,12 @@ To further analyze routing, review the effective routes for **myVM** network int
200
200
201
201
## Test a routing problem due to custom routes
202
202
203
-
You'll create a static custom route to override Azure default system routes and cause a routing problem to **myVM** virtual machine that prevents it from directly communicating with `www.bing.com`. Then, you'll use Network Watcher next hop to troubleshoot and diagnose the problem.
203
+
Next, you'll create a static custom route to override Azure default system routes and cause a routing problem to **myVM** virtual machine that prevents it from directly communicating with `www.bing.com`. Then, you'll use Network Watcher next hop to troubleshoot and diagnose the problem.
204
204
205
205
206
206
### Create a custom route
207
207
208
-
In this section, you'll create a static custom route (user-defined route) in a route table, that will force all traffic destined outside the virtual network to a specific IP address. This is a common scenario to force traffic to a virtual network appliance for inspection.
208
+
In this section, you create a static custom route (user-defined route) in a route table that forces all traffic destined outside the virtual network to a specific IP address. Forcing traffic to a virtual network appliance is a common scenario.
209
209
210
210
1. In the search box at the top of the portal, enter *route table*. Select **Route tables** in the search results.
211
211
@@ -244,7 +244,7 @@ In this section, you'll create a static custom route (user-defined route) in a r
244
244
245
245
### Associate the route table with the subnet
246
246
247
-
In this section, you'll associate the route table that you created in the previous section with **mySubnet** subnet.
247
+
In this section, you associate the route table that you created in the previous section with **mySubnet** subnet.
248
248
249
249
1. Under **Settings**, select **Subnets**, and then select **+ Associate** to associate **myRouteTable** with **mySubnet** subnet.
250
250
@@ -260,20 +260,20 @@ In this section, you'll associate the route table that you created in the previo
260
260
261
261
### Go to `www.bing.com`
262
262
263
-
In **myVM**, open the web browser and go to `www.bing.com` to verify if it's still reachable. The custom route that you created and associated with subnet of **myVM** forces the traffic to go to **myNVA**. The traffic is dropped as **myNVA**is not set up to forward the traffic for the purposes of this tutorial to demonstrate a routing problem.
263
+
In **myVM**, open the web browser and go to `www.bing.com` to verify if it's still reachable. The custom route that you created and associated with subnet of **myVM** forces the traffic to go to **myNVA**. The traffic is dropped as **myNVA**isn't set up to forward the traffic for the purposes of this tutorial to demonstrate a routing problem.
264
264
265
-
:::image type="content" source="./media/diagnose-vm-network-routing-problem/bing-blocked.png" alt-text="Screenshot showing Bing page is not reachable in a web browser.":::
265
+
:::image type="content" source="./media/diagnose-vm-network-routing-problem/bing-blocked.png" alt-text="Screenshot showing Bing page isn't reachable in a web browser.":::
266
266
267
267
268
268
### Test network communication using next hop
269
269
270
-
Repeat the steps you used in [Test network communication using Network Watcher next hop](#test-network-communication-using-network-watcher-next-hop) section using **13.107.21.200** to test the communication to **`www.bing.com`**
270
+
Repeat the steps you used in [Test network communication using Network Watcher next hop](#test-network-communication-using-network-watcher-next-hop) section using **13.107.21.200** to test the communication to `www.bing.com`.
271
271
272
272
:::image type="content" source="./media/diagnose-vm-network-routing-problem/next-hop-virtual-appliance.png" alt-text="Screenshot showing virtual appliance as the next hop after applying a custom route.":::
273
273
274
274
## View effective routes
275
275
276
-
Repeat the steps you used in [View details of a route](view-details-of-a-route) to check the effective routes after using the custom route that caused an issue in reaching `www.bing.com`.
276
+
Repeat the steps you used in [View details of a route](#view-details-of-a-route) to check the effective routes after using the custom route that caused an issue in reaching `www.bing.com`.
277
277
278
278
The custom route with prefix 0.0.0.0/0 overrode Azure default route and caused all traffic destined outside **myVNet** virtual machine to go to 10.0.0.5.
279
279
@@ -293,9 +293,10 @@ When no longer needed, delete the resource group and all of the resources it con
293
293
294
294
## Next steps
295
295
296
-
In this tutorial, you created a VM and diagnosed network routing from the VM. You learned that Azure creates several default routes and tested routing to two different destinations. Learn more about [routing in Azure](../virtual-network/virtual-networks-udr-overview.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json) and how to [create custom routes](../virtual-network/manage-route-table.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json#create-a-route).
296
+
In this tutorial, you created a virtual machine and used Network Watcher next hop to diagnose routing to different destinations. Learn more about [routing in Azure](../virtual-network/virtual-networks-udr-overview.md?toc=%2fazure%2fnetwork-watcher%2ftoc.json).
297
297
298
-
For outbound VM connections, you can also determine the latency, allowed and denied network traffic between the VM and an endpoint, and the route used to an endpoint, using Network Watcher's[connection troubleshoot](network-watcher-connectivity-portal.md) capability. Learn how you can monitor communication between a VM and an endpoint, such as an IP address or URL, over time using the Network Watcher connection monitor capability.
298
+
For outbound VM connections, you can also determine the latency, allowed and denied network traffic between the VM and an endpoint, and the route used to an endpoint, using Network Watcher [connection troubleshoot](network-watcher-connectivity-portal.md) capability.
299
299
300
+
To learn how to monitor communication between two virtual machines, advance to the next tutorial.
300
301
> [!div class="nextstepaction"]
301
302
> [Monitor a network connection](connection-monitor.md)
0 commit comments