I have two VPCs peered on gcp, management and production. I gave the network tag bastion to my bastion vm inside the management vpc, and then made a firewall rule inside production to allow SSH traffic from anything tagged bastion. However production is not allowing ssh traffic from management with that network tag.

Unless I have something misconfigured, network tags do not seem to be working across peered VPCs. I've instead created a firewall rule inside production to allow the iprange of the management vpc, and that works, but I can't seem to do it with network tags.


At the moment, firewall tags are not propagated accross peering VPC networks. We are working on the feature, no ETA is available.

In the meantime, would using Static Internal IPs for the bastion VMs help?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.