SSH using Azure CLI - what IP address to allow?

K. Kong 131

I have a Standard B1s VM running Linux Ubuntu. I want to connect from the Azure VM's Connect page using SSH using Azure CLI. Below is the prerequisites screen:

User's image

There is a blue info item on Port 22 access. Does that indicate something is wrong? When I Connect, it results in "Connection timed out".

My VM firewall uses an access whitelist. Do I have to allow access to the CLI machine? If so, how do I find out its IP address?

1 answer

TP 104K Reputation points

2025-02-07T14:05:34.2833333+00:00

Hi,

You have to allow the public IP of the machine that will connect via SSH. To find the public IP of the client machine you may browse to below link from the client PC:

https://api.ipify.org/

In your NSG incoming rule I recommend you only allow the public IP(s) that you need to SSH from instead of allowing any IP. If using firewall on the VM itself you need to either allow all IPs to connect via port 22 (relying on NSG only) or update it to only allow certain IPs (both public and private).

Please click Accept Answer and upvote if the above was helpful. If something is unclear please add a comment below.

Thanks.

-TP
Please sign in to rate this answer.
K. Kong 131 Reputation points

2025-02-07T15:27:54.8266667+00:00

Is the Azure CLI SSH coming from my computer? I don't think so. My computer can SSH to the VM without issue.

What I wanted to do was to use the "console" from Azure in the browser which I was hoping to be the same IP and accessible every time no matter where I am browsing from. When I am traveling and in a different hotel each night, I don't want to keep updating the whitelist.

AWS has a web console which allows me to connect to the VM from the browser. Isn't the SSH Using CLI on the Azure Connect page similar?

TP 104K Reputation points

2025-02-07T16:04:11.7066667+00:00

Is the Azure CLI SSH coming from my computer? I don't think so. My computer can SSH to the VM without issue.

I misunderstood. When using the Azure CLI SSH via the portal, it connects from your Azure Cloud Shell, so the public IP that will be used is the cloud shell's public IP.You can find the public IP address by entering below command in cloud shell window:

curl http://api.ipify.org

Srinud 3,845 Reputation points Microsoft Vendor

2025-02-12T05:56:59.37+00:00

Hi K. Kong,

I just wanted to check if you had a chance to review answer provided by @TP •. If you found it helpful, could you kindly click the “Accept answer and upvote” on my post.

If you have any further queries, please let us know in the comment.

Thank you.

Srinud 3,845 Reputation points Microsoft Vendor

2025-02-13T13:56:41.3+00:00

Hi K. Kong,

I just wanted to check if you had a chance to review answer provided by @TP •. If you found it helpful, could you kindly click the “Accept answer and upvote” on my post.

If you have any further queries, please let us know in the comment.

Thank you.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

SSH using Azure CLI - what IP address to allow?

1 answer

Your answer