Forum Discussion

ike_bai1022's avatar
ike_bai1022
Copper Contributor
Jun 21, 2022

Azure File Sync to Azure File Share w/ Private Endpoints

I have both my Azure File Share and My Azure File Sync going through private endpoints, Azure File Share works fine and I'm able to access the shares directly on-prem with no issues. I also have Azure File Sync setup on one of my file servers and I want it to sync to one of the Azure File Shares I created for redundancy. I'm able to register the server on Azure File Sync fine and create a sync group, but when I go to create a cloud endpoint I get the following error: 

 

Cloud endpoint '********'
Code: MgmtForbidden
Details: Failed to provision a replica group.

 

I have a site-to-site-vpn setup between my on-prem and azure ad that's up and running fine. I also setup conditional forwarding for core.windows.net & afs.azure.net to point to the IP address of a DNS server that I created in Azure Cloud. My DNS server then uses a conditional forward to point core.windows.net & afs.azure.net to Azure's DNS address 168.63.129.16. 

 

On Prem(Points to DNS Server IP: 

 

On Azure DNS Server (Points to 168.63.129.16):

I even double checked that the file sync service has access to the file share: 

 

I can resolve the hostnames of both private endpoints but I can only ping the IP address of the File Share Private endpoint is there something I'm missing? 

  • ike_bai1022's avatar
    ike_bai1022
    Copper Contributor
    Jun 21, 2022

    I was able to figure this out for anyone else who has this issue, as Microsoft does not provide clear documentation anywhere regarding this use case that I know of:

     

    You need to go to the storage account you want to access and change the Network settings to "Enabled from selected virtual networks and IP addresses"

     

     

     

    Then you have to check off in Exceptions: 

     

    Hope this helps anyone else!

    • sbeel81's avatar
      sbeel81
      Copper Contributor
      Aug 10, 2022
      Thanks, I just had the same problem and this is what I was missing. I had denied all public access to the storage account.
    • ChitraGurumurthy's avatar
      ChitraGurumurthy
      Icon for Microsoft rankMicrosoft
      Feb 07, 2023

      ike_bai1022 , you truly helped me move forward, with something that I have been struggling for quite some time!! Much appreciate you sharing the solution here!  Your solution did help me, to successfully create the cloud end point for the first time.

Resources