Add Bastion connection note to all three tabs

Author: asudbring

articles/virtual-network/ip-services/virtual-networks-static-private-ip.md

@@ -90,6 +90,9 @@ When you create a virtual machine (VM), it's automatically assigned a private IP
 
 1. Select **Review + create**. Review the settings, and then select **Create**.
 
+> [!NOTE]
+> The virtual machine is created without a public IP address and with no public inbound ports. To connect to the virtual machine, use Azure Bastion. For more information, see [Quickstart: Deploy Azure Bastion with default settings](../../bastion/quickstart-host-portal.md).
+
 # [Azure PowerShell](#tab/azurepowershell)
 
 Use the following steps to create a resource group, virtual network, and virtual machine.
@@ -144,6 +147,9 @@ $nsg = @{
 New-AzNetworkSecurityGroup @nsg
 ```
 
+> [!NOTE]
+> The default rules of the network security group block all inbound access from the internet, including SSH. To connect to the virtual machine, use Azure Bastion. For more information, see [Quickstart: Deploy Azure Bastion with default settings](../../bastion/quickstart-host-portal.md).
+
 ### Create a virtual machine
 
 Create a credential object for the virtual machine with [Get-Credential](/powershell/module/microsoft.powershell.security/get-credential). Enter a username and password when prompted:
@@ -209,6 +215,9 @@ az network nsg create \
     --name myNSG
 ```
 
+> [!NOTE]
+> The default rules of the network security group block all inbound access from the internet, including SSH. To connect to the virtual machine, use Azure Bastion. For more information, see [Quickstart: Deploy Azure Bastion with default settings](../../bastion/quickstart-host-portal.md).
+
 ### Create a virtual machine
 
 The following command creates a Linux virtual machine without a public IP address with [az vm create](/cli/azure/vm#az-vm-create). The `--generate-ssh-keys` parameter generates an SSH key pair for the VM: