Forum Discussion

slache's avatar
slache
Copper Contributor
Mar 17, 2024

Access storage account (SMB file share) via private endpoint in a Hub-Spoke setup

Hello community,  I am struggeling with this issue since days now.   I need to access a SMB share (=private endpoint in spoke Vnet) from a VM (Zscaler App Connector) in the Hub Vnet.   The traf...
slache's avatar
slache
Copper Contributor
Mar 17, 2024

Dhanumjay_Akula 

Thanks for your reply.

The IP flow only seems to be relevant for NSGs

I don´t use NSGs in this case.

 

A Connection troubleshoot tells this:

I have really no idea why port tcp/445 ist not reachable from a VM in the Hub Vnet, when it´s allowed on the Azure firewall.

I can see that clearly in the firewall logs.

 

 

Dhanumjay_Akula's avatar
Dhanumjay_Akula
Copper Contributor
Mar 18, 2024

slache 

Please check at VM--> Nic--> Effective Routes

 

 

Let me know did you find the above in your Effective Routes.

  • slache's avatar
    slache
    Copper Contributor
    Mar 23, 2024

    Dhanumjay_Akula 

     

    The /32 Route for the private endpoint is invalid due to the User defined route.

     

     

     

    • Dhanumjay_Akula's avatar
      Dhanumjay_Akula
      Copper Contributor
      Mar 23, 2024

      Hi slache .. !

      May be that is one of the causes to not accessing. 

      Please go through below 

      https://learn.microsoft.com/en-us/azure/virtual-network/diagnose-network-routing-problem 

      https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview  

       

      Regards

      Dhanumjay Akula

      • slache's avatar
        slache
        Copper Contributor
        Mar 23, 2024
        Hi Dhanumjay,
        Thank you.
        I think the invalid status of the hostroute is correct, as I want to steer the traffic through the Azure firewall.

        Regards
        Stephan

Resources