Disable Vnet peering

Question

Hi,We have Vnet Peering set up for two Vnets. For the purpose of some testing, we need to disable it. I have set the below settings for both Vnets&nbsp;&nbsp;&nbsp;The status of the Peering shows Connected, still. We are able to connect to the resources.Please let me know if any further changes are required.Thanks.&nbsp;

ibnmbodji · Answer

Hi it's not possible to disable a vnet peering you have to delete the peering if you don't want communication between Vnets .

"Disabling the Allow virtual network access setting only changes the definition of the VirtualNetwork service tag. It doesn't fully prevent traffic flow across the peer connection, as explained in this setting description."
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering

ersameed-azureacademy · Answer

Use can you Azure policy - Scope will be specific Vnet or RG of Vnet{&nbsp; &nbsp; "policyType": "Custom",&nbsp; &nbsp; "mode": "All",&nbsp; &nbsp; "displayName": "Deny vNet peering ",&nbsp; &nbsp; "description": "This policy denies the creation of vNet Peerings under the assigned scope.",&nbsp; &nbsp; "metadata": {&nbsp; &nbsp; &nbsp; &nbsp; "version": "1.0.1",&nbsp; &nbsp; &nbsp; &nbsp; "category": "Network"&nbsp; &nbsp; },&nbsp; &nbsp; "parameters": {&nbsp; &nbsp; &nbsp; &nbsp; "effect": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "type": "String",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "allowedValues": [&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "Audit",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "Deny",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "Disabled"&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ],&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "defaultValue": "Deny",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "metadata": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "displayName": "Effect",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "description": "Enable or disable the execution of the policy"&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; },&nbsp; &nbsp; "policyRule": {&nbsp; &nbsp; &nbsp; &nbsp; "if": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "field": "type",&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "equals": "Microsoft.Network/virtualNetworks/virtualNetworkPeerings"&nbsp; &nbsp; &nbsp; &nbsp; },&nbsp; &nbsp; &nbsp; &nbsp; "then": {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; "effect": "[parameters('effect')]"&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; }}

Forum Discussion

Disable Vnet peering

2 Replies

Resources