Public access to cluster nodes in Azure using public IP - Windows

Last published : Jun 10, 2026
To allow public access to a cluster node or to an application configured for HA in Azure environment, specify the IP in the PublicIP attribute for the AzureIP resource. This IP is used to map the Public IP address to a secondary private IP address. For example, if you have an application that needs to be highly available and to be accessible globally, you can use the PublicIP attribute of the AzureIP agent to ensure both.
image
Sample service group configuration with Public IP
The following snippet is a service group configuration from a sample VCS configuration file (main.cf):
Sample configuration using AzureAuth agent
group AzureAuthGrp (
                SystemList = { AzureVM1 = 0, AzureVM2 = 1 }
                Parallel = 1
                )

                AzureAuth azureAuth (
                    SubscriptionId = 640a326-fga6-90gh-b616-c1e9bb
                    ClientId = e8d899-d32a-47d04-8986-be739104d
                    SecretKey = fnlhPhrQpiNtrItpRhnGrrNklFngLs
                    TenantId = 9fjkabae-2348-4308-b503-6667d61
                                )

                Phantom phres (
                                )

group AzurePublicIPGrp (
                SystemList = { AzureVM1 = 0, AzureVM2 = 1 }
                )

                IP IP_res (
                     Address = "10.1.5.67"
                     SubNetMask = "255.255.255.0"
                     MACAddress @AzureVM1 = 00-0D-3A-91-73-A0
                     MACAddress @AzureVM2 = 00-0D-3A-92-03-DC
                          )

                NIC NIC_res (
                     MACAddress @AzureVM1 = 00-0D-3A-91-73-A0
                     MACAddress @AzureVM2 = 00-0D-3A-92-03-DC
                            )

                AzureIP AzurePublicIPres (
                     PrivateIP = "10.1.5.42"
                     MACAddress @AzureVM1 = 00-0D-3A-91-73-A0
                     MACAddress @AzureVM2 = 00-0D-3A-92-03-DC
                     PublicIP = "52.165.223.2"
                     AzureAuthResName = azureAuth
                                )

                IP_res requires AzurePublicIPres
                AzurePublicIPres requires NIC_res
Sample configuration using a managed identity
group AzurePublicIPGrp (
SystemList = { AzureVM1 = 0, AzureVM2 = 1 }
)

    IP IP_res (
    Address = "10.1.5.67"
    SubNetMask = "255.255.255.0"
    MACAddress @AzureVM1 = 00-0D-3A-91-73-A0
    MACAddress @AzureVM2 = 00-0D-3A-92-03-DC
    )

    NIC NIC_res (
    MACAddress @AzureVM1 = 00-0D-3A-91-73-A0
    MACAddress @AzureVM2 = 00-0D-3A-92-03-DC
    )

    AzureIP AzurePublicIPres (
    PrivateIP = "10.1.5.42"
    MACAddress @AzureVM1 = 00-0D-3A-91-73-A0
    MACAddress @AzureVM2 = 00-0D-3A-92-03-DC
    PublicIP = "52.165.223.2"
    ManagedIdentityClientID = 1da89bd2-9735-4266-b920-27c23b98f022
    )

IP_res requires AzurePublicIPres
AzurePublicIPres requires NIC_res