Finance | Project Operations, Human Resources, ...

Bastion Connection Error.. verify NSG rules allow ports 22 (SSH) and 3389 (RDP) from 168.63.129.16

(1) Share

Report

Posted on by jt1024

197

I connect to my cloud hosted systems using Bastion not RDP. So I set the network to deny incoming RDP connections.

Then bastion fails with this error:

Connection Error
The target machine is unreachable. Please verify that your NSG rules allow traffic to ports 22 (SSH) and 3389 (RDP) from the private IP address 168.63.129.16.

I fixed it by doing as it says, and making those new rules to have a lower priority number than the deny RDP access rule:

I hope this helps people in the community.

I have the same question (0)

All responses (4)

Answers (0)

Hana Xue Microsoft Employee on at

Like (0)

Report

Hi,
Thank you for your sharing, as you said it will be helpful for others with similar issues. You can mark it as verified to make it clear to more people.
Best Regards,
Hana

Was this reply helpful? Yes No
Mohamed Amine Mahmoudi 26,390 Super User 2025 Season 2 on at

Like (0)

Report

Hi,

Thank you for sharing

Best regards,

Mohamed Amine MAHMOUDI

Was this reply helpful? Yes No
jt1024 197 on at

Like (0)

Report

Hello Mohammad, and Hana,

I've tried marking one of your responses as an answer to move this post to 'verified' but the website just presents a spinning circle indefinitely. So I guess it just has to stay as it is for now.

- Jim
P.S.: I found more info, replied again, marked that as suggested answer, then verified that. Done!

Was this reply helpful? Yes No
Suggested answer

jt1024 197 on at

Like (1)

Report

Hello all,

Just a follow up. You only need the inbound port rules if you're using the new (2024 March era) Developer SKU Bastion. For more see:

https://learn.microsoft.com/en-us/azure/bastion/bastion-overview

https://learn.microsoft.com/en-us/azure/bastion/configuration-settings#skus

You can change what type of Bastion you have following this guide: https://learn.microsoft.com/en-us/azure/bastion/upgrade-sku

Lastly, pricing is listed here: https://azure.microsoft.com/en-us/pricing/details/azure-bastion/

But the developer pricing is not listed, though the other pages linked above indicate it is a lower cost option since there is no additional features or scaling.

I hope this is helpful to others!

Was this reply helpful? Yes No

Join the conversation

Community site session details

Bastion Connection Error.. verify NSG rules allow ports 22 (SSH) and 3389 (RDP) from 168.63.129.16

Helpful resources

Quick Links

Responsible AI policies

Neeraj Kumar – Community Spotlight

Congratulations to the November Top 10 Community Leaders!

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

Featured topics

Product updates

Community site session details

Bastion Connection Error.. verify NSG rules allow ports 22 (SSH) and 3389 (RDP) from 168.63.129.16

Helpful resources

Quick Links

Responsible AI policies

Neeraj Kumar – Community Spotlight

Congratulations to the November Top 10 Community Leaders!

Subscribe to this forum!

Select categories

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

Featured topics

Product updates