Having issue in accessing VMs through Bastion in the Hub and Spoke Architecture.

Nidhi Priya 426

hello experts!

I have three subscriptions in one tenant and I have created a Hub and spoke architecture for them.

As you can see in the screenshot, my first two subscriptions are SPOKE and the last one is HUB

User's image

I have configured Bastion in the Hub and wanted to use the same Bastion for accessing the resources of the other two SPOKEs. User's image

But in the dropdown, I can only see the Virtual Machines present in the first SPOKE, and the VMs of the Second spoke are not identifiable by the Bastion. So what could be the reason behind this, and what could we do to access all the VMs in that SPOKE?

User's image

KapilAnanth-MSFT 39,461 Reputation points Microsoft Employee

2023-12-18T07:16:02.18+00:00
@Nidhi Priya

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Can you confirm if you have below permissions:

Reader role on the virtual machine.

Reader role on the NIC with private IP of the virtual machine.

Reader role on the virtual networks of the target virtual machines

Moreover, what you can do it

Navigate to the VM of the Spoke VNET

From there, use the Connect Section and select Bastion (from Hub)

See : https://video2.skills-academy.com/en-us/azure/bastion/bastion-connect-vm-rdp-windows#rdp

Can you confirm if you are able to RDP/SSH via the above method?

Cheers,

Kapil
KapilAnanth-MSFT 39,461 Reputation points Microsoft Employee

2023-12-19T09:42:18.25+00:00

@Nidhi Priya

Could you please provide an update on this post?

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
KapilAnanth-MSFT 39,461 Reputation points Microsoft Employee

2023-12-20T05:43:42.18+00:00

@Nidhi Priya

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil

Accepted answer

Andreas Baumgarten 102.7K Reputation points MVP

2023-12-18T07:14:59.39+00:00

Hi @Nidhi Priya ,

basically Azure Bastion supports vNets/VMs in different Azure subscriptions.

Here are 2 things you could verify:

If my peered VNets are deployed in different subscriptions, will connectivity via Bastion work?

I have access to the peered VNet, but I can't see the VM deployed there.

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards Andreas Baumgarten
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Share via

Having issue in accessing VMs through Bastion in the Hub and Spoke Architecture.

0 additional answers