Forum Discussion

Copper Contributor

Mar 17, 2024

Access storage account (SMB file share) via private endpoint in a Hub-Spoke setup

Hello community, I am struggeling with this issue since days now. I need to access a SMB share (=private endpoint in spoke Vnet) from a VM (Zscaler App Connector) in the Hub Vnet. The traf...

Dhanumjay_Akula

Copper Contributor

Mar 17, 2024

slache

Please check the connectivity with IP Flow Verify in Network Watcher or please go through the given link

https://learn.microsoft.com/en-us/azure/private-link/troubleshoot-private-endpoint-connectivity

slache

Copper Contributor

Mar 17, 2024

Dhanumjay_Akula

Thanks for your reply.

The IP flow only seems to be relevant for NSGs

I don´t use NSGs in this case.

A Connection troubleshoot tells this:

I have really no idea why port tcp/445 ist not reachable from a VM in the Hub Vnet, when it´s allowed on the Azure firewall.

I can see that clearly in the firewall logs.

Dhanumjay_Akula
Copper Contributor
Mar 18, 2024
slache
Please check at VM--> Nic--> Effective Routes

Let me know did you find the above in your Effective Routes.
- slache
  Copper Contributor
  Mar 23, 2024
  Dhanumjay_Akula
  
  The /32 Route for the private endpoint is invalid due to the User defined route.
  - Dhanumjay_Akula
    Copper Contributor
    Mar 23, 2024
    Hi slache .. !
    May be that is one of the causes to not accessing.
    Please go through below
    https://learn.microsoft.com/en-us/azure/virtual-network/diagnose-network-routing-problem
    https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
    
    Regards
    Dhanumjay Akula