Share via

Bastion DNS failure

Mark Rawson 0 Reputation points
2025-06-17T09:09:24.7466667+00:00

I have a bastion which has no DNS record so when trying to open a VM with it, it fails in the browser with a DNS failure. i.e. bst-xxx.bastion.azure.com doesn't resolve to an IP.

Azure Bastion
Azure Bastion
An Azure service that provides private and fully managed Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines.

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anusree Nashetty 5,820 Reputation points Microsoft External Staff Moderator
    2025-06-17T23:48:43.1633333+00:00

    Hi Mark Rawson,

    Only Bastion hosts with an IPv4 public IP, deployed in the Basic or Standard SKU, get a publicly resolvable DNS like bst-xxxx.region.bastion.azure.com
    If your Bastion is Standard SKU private-only, it won’t have a public DNS name. Verify you have a static, standard public IP assigned. If missing, attach or create a new Public IP, save and wait 10–15 minutes for DNS propagation.

    Confirm no NSG is blocking traffic on AzureBastionSubnet and the VM’s subnet/NIC allows inbound from Bastion on ports 3389 (RDP) or 22 (SSH).

    Run nslookup bst-xxxx.region.bastion.azure.com If successful, it should return the public IP address assigned to your Bastion.

    If you have any further queries, let me know.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.