How to add IoTHub in Networking port rules of a VM

Satyam Chauhan 567

I want to add the IoT Hub and Azure Container Registry in the Destination of Outbound port rule of a azure VM where IoT Edge runtime is installed, so that IoT Edge can send data only to specific IoT Hub. I tried by adding the hostname of the IoT Hub but it is not helping. Providing Any in the destination is working but I want the port to be accessible only to IoT Hub.

Please let me know if there is a way to achieve this.

AshokPeddakotla-MSFT 34,611 Reputation points

2022-11-11T13:32:04.553+00:00

@Satyam Chauhan Can you add more details about your query for further help?

I tried by adding the hostname of the IoTHub but it is not helping

How exactly you have added the destination? which port you have added? Can you share screenshot for better understanding?

Did you see IoT Hub support for virtual networks with Private Link and Managed Identity and Configure an IoT Edge device to act as a transparent gateway not helpful?
Satyam Chauhan 567 Reputation points

2022-11-14T07:53:05.747+00:00

@AshokPeddakotla-MSFT I have updated the details about the query.
AshokPeddakotla-MSFT 34,611 Reputation points

2022-11-15T12:44:39.767+00:00

@Satyam Chauhan Thanks for sharing the additional details. We are looking into this issue and update you as earliest. Appreciate your time and patience.
Meanwhile, please check this similar thread which addressed Inbound and outbound NSG rules for IoT edge Virtual Machine to connect with Azure IoT Hub and see if it helps to resolve your query.

1 answer

Vishu Tyagi 1 Reputation point

2022-11-28T09:50:30.08+00:00

@Satyam Chauhan
I think you can use the service tags ,AzureIoTHub is servcie tag .
Below is the list of service tags with ip ranges.
https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519

To add a service tag you may need to use azure cli as i believe the azure portal do not support adding service tags.

az network nsg rule create --resource-group myResourceGroup --nsg-name myNSG --name RDP-rule --priority 300 \
--destination-address-prefixes '*' --destination-port-ranges "AzureIoTHub " --protocol Tcp --description "Allow RDP"
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to add IoTHub in Networking port rules of a VM

1 answer

Your answer