Azure VM 来宾 OS 防火墙配置不正确Azure VM guest OS firewall is misconfigured

本文介绍如何在 Azure VM 上修复配置不正确的来宾操作系统防火墙。This article introduce how to fix misconfigured guest operating system firewall on Azure VM.

症状Symptoms

  1. 虚拟机 (VM) 欢迎屏幕显示 VM 已完全加载。The virtual machine (VM) Welcome screen shows that the VM is fully loaded.

  2. 根据来宾操作系统的配置方式,可能有一些网络流量到达 VM,也可能没有。Depending on how the guest operating system is configured, there could be some or no network traffic reaching the VM.

原因Cause

来宾系统防火墙配置不正确可能会阻止部分或所有类型的网络流量发往 VM。A misconfiguration of the guest system firewall can block some or all kinds of network traffic to the VM.

解决方案Solution

在执行这些步骤之前,请创建受影响 VM 的系统磁盘快照作为备份。Before you follow these steps, take a snapshot of the system disk of the affected VM as a backup. 有关详细信息,请参阅拍摄磁盘快照For more information, see Snapshot a disk.

若要排查此问题,可通过将 VM 的系统磁盘附加到恢复 VM 来修复 VM 脱机To troubleshoot this issue, repair the VM offline by attaching the system disk of the VM to a recovery VM.

脱机缓解措施Offline Mitigations

  1. 若要启用或禁用防火墙规则,请参阅在 Azure VM 来宾 OS 上启用或禁用防火墙规则To enable or disable firewall rules, refer to Enable or disable a firewall rule on an Azure VM Guest OS.

  2. 检查自己是否在实施来宾 OS 防火墙阻止入站流量方案Check whether you are in the Guest OS firewall blocking inbound traffic scenario.

  3. 如果仍怀疑防火墙是否正在阻止你的访问,请参阅在 Azure VM 中禁用来宾 OS 防火墙,然后通过使用正确的规则来重新启用来宾系统防火墙。If you are still in doubt about whether the firewall is blocking your access, refer to Disable the guest OS Firewall in Azure VM, and then re-enable the guest system firewall by using the correct rules.