How Do I Enable Pinging A VM

Question

How do I enable ping to my VM?

---

I code -- Node.js, JavaScript, PHP, SQL, Bash -- I live --- San Francisco -- I fear -- Savage blood thirsty zombies riding on dinosaurs.

Answer 1

Hi Justin,

• Ping external address from Azure VM - does not work as Azure does not permit outbound ICMP
  
  
• Ping Azure VM from external address - does not work as Azure does not permit inbound ICMP
  
  
• Ping between Azure VMs using internal IP (DIP) - works, but guest OS firewall must be configured to allow it as by default ICMP is blocked by the guest.
  
  
• Ping between Azure VM and on-premise through Azure Connect (point-to-point IPSec VPN tunnel) or Virtual Network Gateway (site-to-site IPSec VPN tunnel) - works, but guest OS firewall must be configured to allow it as by default ICMP is blocked by the guest.
  

To allow ICMP on a Windows VM, from an elevated command prompt, run:

netsh advfirewall firewall add rule name="ICMPv6" dir=in action=allow enable=yes protocol=icmpv6
netsh advfirewall firewall add rule name="ICMPV4" dir=in action=allow enable=yes protocol=icmpv4

As an alternative to ping with ICMP, you can verify connectivity by trying to reach a specific TCP port with tools such as TCPing, PortQuery, or NMap. Those will working inbound to an Azure VM as long as you have opened an endpoint for the port you are trying to reach, and the guest firewall allows it and something is listening on that port. For Azure Connect and Virtual Network Gateways you don't need the endpoints because you are communicating through a VPN tunnel, but the guest firewall would still need to allow the port you are testing, and something needs to be listening on that port.

Thanks,
Craig

Answer 2

Can I request a way to open ping to a Linux VM. We use monitoring, and one of the monitors is ping.

---

I code -- Node.js, JavaScript, PHP, SQL, Bash -- I live --- San Francisco -- I fear -- Savage blood thirsty zombies riding on dinosaurs.

Answer 3

Seriously, Azure doesn't allow outbound ICMP?!??  Or inbound for that matter.  We also have an application which monitors services, some using PING as a starting point.  I'll have to say, that is a pretty lame restriction. I should be able to at least do outbound ICMP. It would be great if I could define an inbound ICMP endpoint for some or all of the ICMP functions.

Does Amazon allow outbound ICMP?  I actually have to find a solution that does and thought Azure would do the trick but from what I read, it won't nor do there appear to be any plans to do so.  :(

Answer 4

Hello,

We are going to close this thread but if you have the issue still occurring please open a new thread for support.

Thanks!

Patrick [MSFT]

Answer 5

Thanks everyone.

It turns out I was experiencing an internal network security constraint that was hindering my attempt to use a VPN.

---

siegfried heintze