Skip to content

Commit f9f11b9

Browse files
Merge pull request #292777 from aimee-littleton/patch-672985
Update troubleshoot-nat-connectivity.md
2 parents 1256def + 4cf49b0 commit f9f11b9

File tree

1 file changed

+5
-7
lines changed

1 file changed

+5
-7
lines changed

articles/nat-gateway/troubleshoot-nat-connectivity.md

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,7 @@ You observe no outbound connectivity on your NAT gateway.
118118

119119
**Troubleshooting steps**
120120

121-
* Check that NAT gateway is configured with at least one public IP address or prefix and attached to a subnet. NAT gateway isn't operational until a public IP and subnet attached. For more information, see [NAT gateway configuration basics](/azure/nat-gateway/troubleshoot-nat#nat-gateway-configuration-basics).
121+
* Check that NAT gateway is configured with at least one public IP address or prefix and attached to a subnet. NAT gateway isn't operational until a public IP and subnet are attached. For more information, see [NAT gateway configuration basics](/azure/nat-gateway/troubleshoot-nat#nat-gateway-configuration-basics).
122122

123123
* Check the routing table of the subnet attached to NAT gateway. Any 0.0.0.0/0 traffic being force-tunneled to a Network Virtual Appliance (NVA), ExpressRoute, or VPN Gateway will take priority over NAT gateway. For more information, see [how Azure selects a route](/azure/virtual-network/virtual-networks-udr-overview#how-azure-selects-a-route).
124124

@@ -156,7 +156,7 @@ NAT gateway is deployed in your Azure virtual network but unexpected IP addresse
156156

157157
* NAT gateway misconfiguration.
158158

159-
* Active connection with another Azure outbound connectivity method such as Azure Load balancer or instance-level public IPs on virtual machines. Active connection flows continue to use the previous public IP address that was assigned when the connection was established. When NAT gateway is deployed, new connections start using NAT gateway right away.
159+
* Active connection with another Azure outbound connectivity method such as Azure Load balancer or instance-level public IPs on virtual machines or default outbound access. Active connection flows continue to use the previous public IP address that was assigned when the connection was established. When NAT gateway is deployed, **new** connections start using NAT gateway right away.
160160

161161
* Private IPs are used to connect to Azure services by service endpoints or Private Link.
162162

@@ -174,21 +174,19 @@ NAT gateway is deployed in your Azure virtual network but unexpected IP addresse
174174

175175
* Check if you have [Private Link](/azure/private-link/manage-private-endpoint?tabs=manage-private-link-powershell#manage-private-endpoint-connections-on-azure-paas-resources) or [service endpoints](../virtual-network/virtual-network-service-endpoints-overview.md#logging-and-troubleshooting) enabled for connecting to other Azure services.
176176

177-
* Ensure that your virtual machine is located in the same region as the Azure storage when making a storage connection.
178-
177+
* Check if your virtual machine is located in the same region as the Azure storage when making a storage connection.
179178

180179
* Verify if the public IP address used for connections is originating from another Azure service within your Azure virtual network, such as a Network Virtual Appliance (NVA).
181180

182-
183181
### Possible solutions for NAT gateway public IP not used to connect outbound
184182

185183
* Attach a public IP address or prefix to NAT gateway. Ensure that NAT gateway is attached to subnets from the same virtual network. [Validate that NAT gateway can connect outbound](/azure/nat-gateway/troubleshoot-nat#how-to-validate-connectivity).
186184

187-
* Test and resolve issues with VMs holding on to old SNAT IP addresses from another outbound connectivity method by:
185+
* Test and resolve issues with VMs holding on to Public IP addresses from another outbound connectivity method, including Load balancer, instance-level public IPs or default outbound access by:
188186

189187
* Ensure you establish a new connection and that existing connections aren't being reused in the OS or that the browser is caching the connections. For example, when using curl in PowerShell, make sure to specify the -DisableKeepalive parameter to force a new connection. If you're using a browser, connections can also be pooled.
190188

191-
* It isn't necessary to reboot a virtual machine in a subnet configured to NAT gateway. However, if a virtual machine is rebooted, the connection state is flushed. When the connection state is flushed, all connections begin using the NAT gateway resource's IP address or addresses. This behavior is a side effect of the virtual machine reboot and not an indicator that a reboot is required.
189+
* Reboot the virtual machine (perform a STOP / START) in a subnet configured to NAT gateway. If a virtual machine is rebooted, the connection state is flushed. When the connection state is flushed, all new connections begin using the NAT gateway resource's IP address or addresses. Keep in mind that if the VM has any active connections at the time that you reboot, those connections will be dropped.
192190

193191
* If your investigation is inconclusive, open a support case to [further troubleshoot](#more-troubleshooting-guidance).
194192

0 commit comments

Comments
 (0)