title: How to access private VMs within an azure virtual network
body: <p>Say I have an azure deployment with a Vnet, a loadbalancer with a public IP and two VMs behind it with private IPs.</p>
  
  <p>If I want to access these VMs from outside of the vnet via SSH e.g. to gather logs, or to otherwise manage, either from another vnet in azure or from somewhere completely external, do I then have to have public IPs on the nics for those VMs as well? That feels a bit odd. How are private vms in a vnet usually accessed? Do you just have another VM within the same vnet with a public IP that you can use to access the private VMs? Or do I need to set up a VPN between two vnets in azure, or the vnet and another external network?</p>