topic Re: Azure VM Series - Peered VNET traffic does not go outbound in VM-Series in the Public Cloud

Azure VM Series - Peered VNET traffic does not go outbound

msazure — Wed, 16 Mar 2022 14:51:51 GMT

I have created a VM series in Azure. I could see that the traffic from trusted subnet (from VM1 in the below diagram) is able to go outbound to internet, however traffic from a peered VNET (from VMs in the subnet1 in the peered VNET in the below diagram) shows "incomplete" status in the logs. I have a route table that routes the traffic from the peered VNET (subnet) to the trusted nic. Any additional configuration is needed to get this outbound traffic working?

Re: Azure VM Series - Peered VNET traffic does not go outbound

dmaynard — Wed, 16 Mar 2022 15:02:05 GMT

A return route in the FW virtual router for the peered vnet.

Security rule allowing traffic

NAT if required

Re: Azure VM Series - Peered VNET traffic does not go outbound

msazure — Wed, 16 Mar 2022 15:37:18 GMT

Appreciated the quick response.

By the return route - is it a static route to the peered VNET added to the trusted Virtual Router? Like below:

Peered VNet space (10.2.0.0/24) : Interface Ethernet 1/2 (trusted) -> Next Hop : IP Address Of the Default Gateway of the Trusted Subnet.

Security rule - since this is non prod, we have Allowed All from trusted zone to untrusted zone - anything more specific to peered?

NAT Rule - anything specific for peering?

Thanks in advance!