Solved

Unable to access URL on Azure Windows VM from my on-premise subnet

Posted on 2016-10-04
12
13 Views
Last Modified: 2016-10-29
I have a Web Server on Windows Server 2012 r2 on Microsoft Azure. My vendor built a a webpage that I need to access from my on-premise subnet. I created inbound security rule in the Network Security Group allowing my subnet connection to the server via HTTP/HTTPS and I can't connect using DNS name or IP address. When I enabled access to the same page from my vendors IP address, they can easily access it.

Also, I have a VPN tunnel between my Azure environment and my on-premise subnet.
I can easily connect via RDP, but can't over HTTP.

Any advise appreciated.
Thanks.
0
Comment
Question by:Lev Kaytsner
  • 7
  • 5
12 Comments
 
LVL 26

Expert Comment

by:Dan McFadden
ID: 41829426
Is your http traffic going thru your VPN tunnel?  If not, the network security group rule needs to know what your public IP address (or address range) is.

Dan
0
 

Author Comment

by:Lev Kaytsner
ID: 41829988
Thanks Dan,

My internet traffic is not going thru the VPN tunnel with Azure and I added our external IP address to  the network security group. It didn't help. I even added external IP block that belongs to my firewall outside interface.

But, I can access this server via private IP assigned to the server.
So I wonder if my VPN tunnel with Azure is messing this up.

Thanks,
Lev
0
 

Author Comment

by:Lev Kaytsner
ID: 41829993
When I do a tracert command to the IP I want to access, I can't even go past my internal router.
I am sure its unrelated, I can't tracert any IP from my workstation or any internal device.
0
 
LVL 26

Expert Comment

by:Dan McFadden
ID: 41830011
Can you ping anything on the Azure side?

Dan
0
 

Author Comment

by:Lev Kaytsner
ID: 41830017
No. I don't think Azure allows ping commands.
0
 
LVL 26

Expert Comment

by:Dan McFadden
ID: 41830026
There are other way to verify connectivity.

Link:  https://blogs.msdn.microsoft.com/mast/2014/06/22/use-port-pings-instead-of-icmp-to-test-azure-vm-connectivity/

SysInternals:  https://technet.microsoft.com/en-us/sysinternals/psping
*** the utility mentioned in the first link.

Dan
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 

Author Comment

by:Lev Kaytsner
ID: 41830033
Thanks, this is interesting. Let me try this.
Lev
0
 
LVL 26

Expert Comment

by:Dan McFadden
ID: 41857061
Any additional info on this question?

Dan
0
 

Accepted Solution

by:
Lev Kaytsner earned 0 total points
ID: 41857076
Hi,

I was actually able to solve it. The problem was in the way my VPN tunnel was set up between my local network and Azure. My public IP address that is advertised when we go online was part of the subnet that was added to the VPN and every time I wanted to get to the servers or URL's with Azure's public IP address, I was coming back to my local subnet since it was part of the VPN tunnel.

When I removed that subnet and only left my workstations subnet in the tunnel, I was able to access it.

In other words I was creating a loop instead of 2 way traffic.

Thanks for the follow up.
This is something to remember.
Lev
0
 
LVL 26

Assisted Solution

by:Dan McFadden
Dan McFadden earned 500 total points
ID: 41857082
Glad to have helped.

Dan
0
 

Author Comment

by:Lev Kaytsner
ID: 41857087
Thank you Dan!
0
 

Author Closing Comment

by:Lev Kaytsner
ID: 41865052
With Dan McFadden's help I was able to look into the settings closer and find a solution.
0

Featured Post

Superior storage. Superior surveillance.

WD Purple drives are built for 24/7, always-on, high-definition security systems. With support for up to 8 hard drives and 32 cameras, WD Purple drives are optimized for surveillance.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Companies keep a much closer eye on costs today, so changing to new Technology – Microsoft Office 365 is the smartest move to take.
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now