question

CNServices-5065 avatar image
0 Votes"
CNServices-5065 asked SaiKishor-MSFT commented

Unable to SSH, Ping or SCP to Cisco CSR1000v on Azure Transit VNet

During Cisco SD-WAN Azure Integration using Cloud onRamp IaaS method - The IaaS script after providing necessary Azure information says successful As a result 2 new CSR1000v are created on Azure Transit VNet. Issue: But can't ping to it, ssh to it or scp to it.... Already added Inbound rule to allow ICMP, SSH etc... Any ideas?

azure-virtual-wan
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@CNServices-5065 Where are you pinging from i.e., from internet or from one of the spokes? Usually the Cisco CSR inside the Transit Vnet itself is not reachable from the spokes and is only used for routing traffic from spoke-spoke.

0 Votes 0 ·

1 Answer

CNServices-5065 avatar image
0 Votes"
CNServices-5065 answered SaiKishor-MSFT commented

Hi SaiKishor, I need to have a way to connect to the Transit Vnet CSR from either my local client or from SD-WAN site or vManage -> for copying over root-cert on it... But currently I can't ping/ssh/scp to it

Any ideas on why? I have added the needed rules on NSG for ssh port, icmp and FW ports already.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Are you connecting using the Public IP of the CSR? Please check the routes for the CSR and confirm that it has a route for the internet i.e., 0.0.0.0/0.

0 Votes 0 ·