我创建了一个资源组,其中包含 Windows Server VM 所需的所有资源。
这是脚本:
#Variables
variable "rsg" { default = "EXTEDO_US_EASTUS" }
variable "location" { default = "East US" }
variable "hostname" { default = "EXTPSUS1" }
variable "username" { default = "xxxxxxx" }
variable "password" { default = "xxxxxxx" }
variable "vmsize" { default = "Standard_DS1_v2" }
variable "storagetype" { default = "Premium_LRS" }
variable "add-space" { default = "10.0.2.0/24" }
variable "add-subnet1" { default = "10.0.2.0/24" }
variable "sku" { default = "2016-Datacenter" }
variable "environment" { default = "Publishing"}
# Build the Resource Group
resource "azurerm_resource_group" "rsg" {
name = "${var.rsg}"
location = "${var.location}"
}
# Build the Virtual Network
resource "azurerm_virtual_network" "vnet" {
name = "${var.rsg}-vnet"
address_space = ["${var.add-space}"]
location = "${var.location}"
resource_group_name = "${azurerm_resource_group.rsg.name}"
}
# Build subnet
resource "azurerm_subnet" "subnet1" {
name = "Publishing"
resource_group_name = "${azurerm_resource_group.rsg.name}"
virtual_network_name = "${azurerm_virtual_network.vnet.name}"
address_prefix = "${var.add-subnet1}"
}
# Create Public IP
resource "azurerm_public_ip" "pip" {
name = "${var.hostname}-pip"
location = "${var.location}"
resource_group_name = "${azurerm_resource_group.rsg.name}"
public_ip_address_allocation = "static"
tags {
environment = "Production"
}
}
# Network Security Group
resource "azurerm_network_security_group" "nsg" {
name = "${var.rsg}-nsg"
location = "${var.location}"
resource_group_name = "${azurerm_resource_group.rsg.name}"
security_rule {
name = "RDP"
priority = 100
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = 3389
destination_port_range = 3389
source_address_prefix = "*"
destination_address_prefix = "*"
}
tags {
environment = "Production"
}
}
# Set the private and public IP
resource "azurerm_network_interface" "ni" {
name = "${var.hostname}-ni"
location = "${var.location}"
resource_group_name = "${azurerm_resource_group.rsg.name}"
network_security_group_id = "${azurerm_network_security_group.nsg.id}"
# dynamic IP configuration
ip_configuration {
name = "${var.hostname}-ipconfig"
subnet_id = "${azurerm_subnet.subnet1.id}"
private_ip_address_allocation = "dynamic"
}
}
# Build Virtual Machine
resource "azurerm_virtual_machine" "vm" {
name = "${var.hostname}"
location = "${var.location}"
resource_group_name = "${azurerm_resource_group.rsg.name}"
network_interface_ids = ["${azurerm_network_interface.ni.id}"]
vm_size = "${var.vmsize}"
storage_image_reference {
publisher = "MicrosoftWindowsServer"
offer = "WindowsServer"
sku = "${var.sku}"
version = "latest"
}
storage_os_disk {
name = "${var.hostname}-osdisk"
caching = "ReadWrite"
create_option = "FromImage"
managed_disk_type = "${var.storagetype}"
}
os_profile {
computer_name = "${var.hostname}"
admin_username = "${var.username}"
admin_password = "${var.password}"
}
tags {
environment = "production"
}
}
资源组创建成功。一切看起来都很好,但我无法通过 RDP 连接到虚拟机。
是否有人在连接到通过 terraform 创建的 Windows 虚拟机时遇到问题?
我检查了网络安全组是否正确并且 RDP 端口是否已打开。
最佳答案
我已经用你的脚本进行了测试,得到同样的错误。
根本原因是您的 azurerm_network_security_group.nsg
防火墙设置。
我们应该使用“*”来替换source_port_range
,如下所示:
security_rule {
name = "RDP"
priority = 100
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = *
destination_port_range = 3389
如果您想解决此问题,请删除您的 NSG 规则并创建一个新规则,如下所示:
关于azure - Terraform - Azure Windows VM 连接问题,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/46304388/