Solved

Unable to access URL on Azure Windows VM from my on-premise subnet

Posted on 2016-10-04
12
16 Views
Last Modified: 2016-10-29
I have a Web Server on Windows Server 2012 r2 on Microsoft Azure. My vendor built a a webpage that I need to access from my on-premise subnet. I created inbound security rule in the Network Security Group allowing my subnet connection to the server via HTTP/HTTPS and I can't connect using DNS name or IP address. When I enabled access to the same page from my vendors IP address, they can easily access it.

Also, I have a VPN tunnel between my Azure environment and my on-premise subnet.
I can easily connect via RDP, but can't over HTTP.

Any advise appreciated.
Thanks.
0
Comment
Question by:Lev Kaytsner
  • 7
  • 5
12 Comments
 
LVL 27

Expert Comment

by:Dan McFadden
ID: 41829426
Is your http traffic going thru your VPN tunnel?  If not, the network security group rule needs to know what your public IP address (or address range) is.

Dan
0
 

Author Comment

by:Lev Kaytsner
ID: 41829988
Thanks Dan,

My internet traffic is not going thru the VPN tunnel with Azure and I added our external IP address to  the network security group. It didn't help. I even added external IP block that belongs to my firewall outside interface.

But, I can access this server via private IP assigned to the server.
So I wonder if my VPN tunnel with Azure is messing this up.

Thanks,
Lev
0
 

Author Comment

by:Lev Kaytsner
ID: 41829993
When I do a tracert command to the IP I want to access, I can't even go past my internal router.
I am sure its unrelated, I can't tracert any IP from my workstation or any internal device.
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 27

Expert Comment

by:Dan McFadden
ID: 41830011
Can you ping anything on the Azure side?

Dan
0
 

Author Comment

by:Lev Kaytsner
ID: 41830017
No. I don't think Azure allows ping commands.
0
 
LVL 27

Expert Comment

by:Dan McFadden
ID: 41830026
There are other way to verify connectivity.

Link:  https://blogs.msdn.microsoft.com/mast/2014/06/22/use-port-pings-instead-of-icmp-to-test-azure-vm-connectivity/

SysInternals:  https://technet.microsoft.com/en-us/sysinternals/psping
*** the utility mentioned in the first link.

Dan
0
 

Author Comment

by:Lev Kaytsner
ID: 41830033
Thanks, this is interesting. Let me try this.
Lev
0
 
LVL 27

Expert Comment

by:Dan McFadden
ID: 41857061
Any additional info on this question?

Dan
0
 

Accepted Solution

by:
Lev Kaytsner earned 0 total points
ID: 41857076
Hi,

I was actually able to solve it. The problem was in the way my VPN tunnel was set up between my local network and Azure. My public IP address that is advertised when we go online was part of the subnet that was added to the VPN and every time I wanted to get to the servers or URL's with Azure's public IP address, I was coming back to my local subnet since it was part of the VPN tunnel.

When I removed that subnet and only left my workstations subnet in the tunnel, I was able to access it.

In other words I was creating a loop instead of 2 way traffic.

Thanks for the follow up.
This is something to remember.
Lev
0
 
LVL 27

Assisted Solution

by:Dan McFadden
Dan McFadden earned 500 total points
ID: 41857082
Glad to have helped.

Dan
0
 

Author Comment

by:Lev Kaytsner
ID: 41857087
Thank you Dan!
0
 

Author Closing Comment

by:Lev Kaytsner
ID: 41865052
With Dan McFadden's help I was able to look into the settings closer and find a solution.
0

Featured Post

Master Your Team's Linux and Cloud Stack!

The average business loses $13.5M per year to ineffective training (per 1,000 employees). Keep ahead of the competition and combine in-person quality with online cost and flexibility by training with Linux Academy.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
In this Micro Tutorial viewers will learn how to restore their server from Bare Metal Backup image created with Windows Server Backup feature. As an example Windows 2012R2 is used.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question