Azure Bastion service in North Europe to connect to virtual machines in the UK South location
Connect to Virtual Machines in UK South using Azure Bastion in North Europe
Since Azure Bastion is region-specific, we will use VNet Peering to enable access from a Bastion host in North Europe to a VM in UK South.
🛠 Steps to Implement in Azure Portal
Let’s start by creating a resource group bastion-rg in the North europe region. As the resource group are not region specific
Step 1: Create Virtual Networks (VNet)
1.1 Create VNet in North Europe
1. Go to Azure Portal → Search for Virtual Networks.
2. Click Create and fill in:
• Name: VNet-NorthEurope
• Region: North Europe
• Address Space: 10.0.0.0/16
• Subnet:
• Name: Subnet-North
• Address Range: 10.0.1.0/24
3. Click Review + Create → Create.
1.2 Create VNet in UK South
1. Go to Virtual Networks → Click Create.
2. Fill in:
• Name: VNet-UKSouth
• Region: UK South
• Address Space: 10.1.0.0/16
• Subnet:
• Name: Subnet-UK
• Address Range: 10.1.1.0/24
3. Click Review + Create → Create.
Step 2: Deploy an Azure Bastion in North Europe
1. Go to Azure Portal → Search for Bastion.
2. Click Create Bastion.
3. Fill in:
• Resource Group: bastion-rg.
• Region: North Europe
• Virtual Network: VNet-NorthEurope
• Subnet Name: AzureBastionSubnet
• Subnet Address Range: 10.0.2.0/27
• Public IP: VNet-NorthEurope-ip
4. Click Review + Create → Create.
Step 3: Deploy a Virtual Machine in UK South
1. Go to Azure Portal → Virtual Machines → Create VM.
2. Fill in:
• Name: VM-UKSouth
• Region: UK South
• Size: Standard_B1s
• OS: Ubuntu
• Authentication: Username + Password .
• Virtual Network: VNet-UKSouth
• Subnet: Subnet-UK
3. Click Review + Create → Create.
Step 4: Configure VNet Peering
4.1 Peer VNet-NorthEurope with VNet-UKSouth
1. Go to Azure Portal → Virtual Networks.
2. Select VNet-NorthEurope → Click Peerings → Click + Add.
3. Fill in:
• Peering Name: NorthEurope-to-UKSouth
• Remote VNet: Select VNet-UKSouth
• Allow Virtual Network Access: Enabled
• Allow Forwarded Traffic: Enabled
• Allow Gateway Transit: Disabled
4. Click OK.
4.2 Peer VNet-UKSouth with VNet-NorthEurope
1. Go to Virtual Networks → VNet-UKSouth.
2. Click Peerings → + Add.
3. Fill in:
• Peering Name: UKSouth-to-NorthEurope
• Remote VNet: Select VNet-NorthEurope
• Allow Virtual Network Access: Enabled
• Allow Forwarded Traffic: Enabled
• Allow Gateway Transit: Disabled
4. Click OK.
Step 5: Connect to VM in UK South Using Bastion
1. Go to Azure Portal → Virtual Machines.
2. Select VM-UKSouth.
3. Click Connect → Bastion.
4. Select Bastion Host in North Europe (VNet-NorthEurope).
5. Enter VM Credentials → Click Connect.
🚀 You are now connected to a VM in UK South using Azure Bastion in North Europe!
🔍 Key Takeaways
✅ Azure Bastion is region-specific, but VNet Peering enables cross-region access.
✅ VNet Peering allows secure VM communication between North Europe and UK South.
✅ Bastion provides RDP/SSH access without exposing VMs to the internet.