Azure VPN Gateway
An Azure service that enables the connection of on-premises networks to Azure through site-to-site virtual private networks.
1,725 questions
How can I access a public AKS cluster from my local machine after adding the public IP of the Virtual Network Gateway to the authorized IP ranges of the cluster?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 47%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Saurabh_Pilankar
0
Reputation points
I have created the public AKS cluster in a subnet, let's say 11.2.0.0/24, and also created the VPN gateway in the same VNet as that of the cluster and configured the point-to-site connection. I got the public IP from the virtual network gateway that I added to the authorized IP range of the cluster. I also configured the VPN with the configuration that I got after configuring the P2S connection. After connecting to the Vpn am supposed to access the cluster resources, but it still showing my public IP and saying not authorized.
Azure VPN Gateway
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 71%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGP%3C/text%3E%3C/svg%3E)
Ganesh Patapati 5,680 Reputation points Microsoft External Staff2025-04-11T12:16:18.6466667+00:00 Hello Saurabh_Pilankar
I understand that the AKS cluster isn't recognizing your VPN connection correctly and is still seeing your public IP instead of routing traffic through the VPN.Here are a few things to check:
- Ensure that your VPN gateway is correctly routing traffic to the AKS subnet, as misconfigured routing tables can cause traffic to bypass the VPN.
- Check if your AKS cluster has NSG rules that restrict access based on IP ranges, and make sure your VPN-assigned IP is included in the allowed ranges.
- If your AKS cluster is public, it might still be using public IPs for authentication, so you may need to configure private endpoints or ensure that your VPN assigns an IP.
I hope this has been helpful!
If above is unclear and/or you are unsure about something add a comment below.
-
Ganesh Patapati 5,680 Reputation points Microsoft External Staff
2025-04-14T09:28:41.9733333+00:00 Hello Saurabh_Pilankar
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
-
Ganesh Patapati 5,680 Reputation points Microsoft External Staff
2025-04-15T10:15:38.9066667+00:00 Hello Saurabh_Pilankar
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Sign in to comment
Sign in to answer