Skip to content

Connect to VM¶

Connecting to Azure virtual machines requires specific protocols depending on the operating system and security requirements. Use Azure Bastion for the most secure, browser-based access without public IP addresses.

Connection Methods¶

Method	Public IP Required	Security Level
Azure Bastion	No	High
VPN/ExpressRoute + Private IP	No	High
JIT VM Access + Public IP	Yes (temporary)	Medium
Direct Public IP	Yes	Low (not recommended)

Connection Path Architecture¶

graph TD
    User[User Laptop]
    Internet((Public Internet))

    subgraph Azure VNet
        Bastion[Azure Bastion]
        VM1[Private VM]
        VM2[Public VM]
    end

    User --> Internet
    Internet -- HTTPS --> Bastion
    Bastion -- Private IP --> VM1
    Internet -- Port 22/3389 --> VM2

Tip

Always use SSH key pairs instead of passwords for Linux VMs to prevent brute-force attacks.

Troubleshooting Quick Reference¶

Symptom	Check	Action
Timeout	NSG + Route + Access Path	Verify Bastion/VPN path or inbound 22/3389 rule for approved source
Auth Failed	Credentials	Reset password/SSH key in Portal "Help" section
Port Closed	OS Firewall	Check 'ufw' or 'Windows Firewall' status

See Also¶

Sources¶