{"id":11238,"date":"2026-05-18T10:56:20","date_gmt":"2026-05-18T15:56:20","guid":{"rendered":"https:\/\/stevepedwards.today\/DebianAdmin\/?p=11238"},"modified":"2026-05-18T10:56:20","modified_gmt":"2026-05-18T15:56:20","slug":"azure-serial-console-and-nat-gw-with-pip-public-ip-for-vm","status":"publish","type":"post","link":"https:\/\/stevepedwards.today\/DebianAdmin\/azure-serial-console-and-nat-gw-with-pip-public-ip-for-vm\/","title":{"rendered":"Azure Serial Console and NAT GW with pip (Public IP) for VM:"},"content":{"rendered":"
<\/div>\n

<\/path><\/svg><\/i> \"Loading\"<\/p>\n

<\/div>\n

Azure Serial Console and NAT GW with pip (Public IP) for VM:<\/p>\n

Connect to VM options:<\/p>\n

Click your VM:<\/p>\n

<\/p>\n

<\/p>\n

Click Connect \u2013 More Ways to connect and choose Go To Serial Console:<\/p>\n

<\/p>\n

<\/p>\n

<\/p>\n

Run:<\/p>\n

steve@ubuntu:~$ curl ifconfig.me<\/p>\n

40.67.243.157steve@ubuntu:~$<\/a><\/p>\n

steve@ubuntu:~$ ls \/<\/p>\n

bin etc lib64 opt sbin sys<\/p>\n

bin.usr-is-merged home lost+found proc sbin.usr-is-merged tmp<\/p>\n

boot lib media root snap usr<\/p>\n

dev lib.usr-is-merged mnt run srv var<\/p>\n

You can now access the VM from the Serial Terminal or the IP shown can be connected to from WSL2 via SSH remotely also using:<\/p>\n

ssh steve@40.67.243.157<\/a><\/p>\n

<\/p>\n

Install nginx and verify default webpage exists using curl:<\/p>\n

steve@ubuntu:~$ curl http:\/\/localhost<\/p>\n

<!DOCTYPE html><\/p>\n

<html><\/p>\n

<head><\/p>\n

<title>Welcome to nginx!<\/title><\/p>\n

<style><\/p>\n

html { color-scheme: light dark; }<\/p>\n

body { width: 35em; margin: 0 auto;<\/p>\n

font-family: Tahoma, Verdana, Arial, sans-serif; }<\/p>\n

<\/style><\/p>\n

<\/head><\/p>\n

<body><\/p>\n

<h1>Welcome to nginx!<\/h1><\/p>\n

<p>If you see this page, the nginx web server is successfully installed and<\/p>\n

working. Further configuration is required.<\/p><\/p>\n

<p>For online documentation and support please refer to<\/p>\n

<a href=\"http:\/\/nginx.org\/\">nginx.org<\/a>.<br\/><\/p>\n

Commercial support is available at<\/p>\n

<a href=\"http:\/\/nginx.com\/\">nginx.com<\/a>.<\/p><\/p>\n

<p><em>Thank you for using nginx.<\/em><\/p><\/p>\n

<\/body><\/p>\n

<\/html><\/p>\n

You can access this page via a browser if you allow http from the Inbound Rules in the Network Settings of the VM:<\/p>\n

<\/p>\n

To add another Inbound Rule:<\/p>\n

Adding the HTTPS Rule<\/strong><\/p>\n

    \n
  1. Navigate back to your VM's Networking<\/strong> (or Network settings<\/strong>) page in the Azure Portal.<\/li>\n
  2. Click the Create port rule<\/strong> button on the right side of the screen. A blade (sidebar) will slide out from the right. Use the drop menu to choose the service, say https, and click ADD:<\/li>\n<\/ol>\n

    <\/p>\n

    <\/p>\n

    <\/p>\n

    steve@baby:~$ nmap -Pn 40.67.243.157<\/p>\n

    Starting Nmap 7.94SVN ( https:\/\/nmap.org ) at 2026-05-18 16:22 BST<\/p>\n

    Nmap scan report for 40.67.243.157<\/p>\n

    Host is up (0.068s latency).<\/p>\n

    Not shown: 997 filtered tcp ports (no-response)<\/p>\n

    PORT STATE SERVICE<\/p>\n

    22\/tcp open ssh<\/p>\n

    80\/tcp open http<\/p>\n

    443\/tcp closed https<\/strong><\/p>\n

    To see the nginx webpage with port 443 SSL, nginx needs a temp cert:<\/p>\n

    sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/nginx-selfsigned.key -out \/etc\/ssl\/certs\/nginx-selfsigned.crt<\/p>\n

    <\/p>\n

    Update Your Nginx Configuration<\/strong><\/p>\n

    Open your default Nginx site configuration file:<\/p>\n

    Bash<\/p>\n

    sudo vi \/etc\/nginx\/sites-available\/default<\/p>\n

    Scroll down and add a new server block specifically for port 443 right below your existing port 80 block:<\/p>\n

    <\/p>\n

    :wq<\/p>\n

    Test and Restart Nginx<\/strong><\/p>\n

    Test your configuration for syntax errors:<\/p>\n

    <\/p>\n

    steve@ubuntu:~$ sudo nginx -t<\/p>\n

    nginx: the configuration file \/etc\/nginx\/nginx.conf syntax is ok<\/p>\n

    nginx: configuration file \/etc\/nginx\/nginx.conf test is successful<\/p>\n

    Restart nginx:<\/p>\n

    sudo systemctl restart nginx<\/p>\n

    steve@baby:~$ nmap -Pn 40.67.243.157<\/p>\n

    Starting Nmap 7.94SVN ( https:\/\/nmap.org ) at 2026-05-18 16:35 BST<\/p>\n

    Nmap scan report for 40.67.243.157<\/p>\n

    Host is up (0.071s latency).<\/p>\n

    Not shown: 997 filtered tcp ports (no-response)<\/p>\n

    PORT STATE SERVICE<\/p>\n

    22\/tcp open ssh<\/p>\n

    80\/tcp open http<\/p>\n

    443\/tcp open https<\/p>\n

    HTTPS Port is open. Test the connection from the terminal:<\/p>\n

    steve@ubuntu:~$ curl https:\/\/localhost<\/p>\n

    curl: (60) SSL certificate problem: self-signed certificate<\/p>\n

    More details here: https:\/\/curl.se\/docs\/sslcerts.html<\/p>\n

    curl failed to verify the legitimacy of the server and therefore could not<\/p>\n

    establish a secure connection to it. To learn more about this situation and<\/p>\n

    how to fix it, please visit the web page mentioned above.<\/p>\n

    To tell curl that you acknowledge the risk and want to proceed anyway, add the -k (or --insecure) flag:<\/p>\n

    Bash<\/p>\n

    curl -k https:\/\/localhost<\/p>\n

    steve@ubuntu:~$ curl -k https:\/\/localhost<\/p>\n

    <html><\/p>\n

    <head><title>403 Forbidden<\/title><\/head><\/p>\n

    <body><\/p>\n

    <center><h1>403 Forbidden<\/h1><\/center><\/p>\n

    <hr><center>nginx\/1.24.0 (Ubuntu)<\/center><\/p>\n

    <\/body><\/p>\n

    <\/html><\/p>\n

    The browser confirms the same text, connection works:<\/p>\n

    <\/p>\n

    Tear down the session from your WSL2 terminal that has az cli installed e.g.:<\/p>\n

    az group delete --name NetworkWatcherRG --no-wait --yes<\/p>\n

    az group delete --name VM_Linux --no-wait --yes<\/p>\n

    Check the groups are deleting in the Activity log:<\/strong><\/p>\n

    <\/strong><\/p>\n

    Remove IP addresses separately to be sure \u2013 they cost if left running!<\/strong><\/p>\n

    <\/strong><\/p>\n

    Use Shift F5 to clear cache and check Resources are gone:<\/p>\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    <\/div>\n

    <\/path><\/svg><\/i> \"Loading\"<\/p>\n

    <\/div>\n

    Azure Serial Console and NAT GW with pip (Public IP) for VM: Connect to VM options: Click your VM: Click Connect \u2013 More Ways to connect and choose Go To Serial Console: Run: steve@ubuntu:~$ curl ifconfig.me 40.67.243.157steve@ubuntu:~$ steve@ubuntu:~$ ls \/ bin etc lib64 opt sbin sys bin.usr-is-merged home lost+found proc sbin.usr-is-merged tmp boot lib media ...\u00a0 Azure Serial Console and NAT GW with pip (Public IP) for VM:<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-11238","post","type-post","status-publish","format-standard","hentry","category-post"],"a3_pvc":{"activated":true,"total_views":2,"today_views":0},"_links":{"self":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts\/11238","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/comments?post=11238"}],"version-history":[{"count":1,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts\/11238\/revisions"}],"predecessor-version":[{"id":11256,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts\/11238\/revisions\/11256"}],"wp:attachment":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/media?parent=11238"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/categories?post=11238"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/tags?post=11238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}