You can't connect to a VM from the VM page itself if you want to use a private IP address; rather, you must connect from Bastion to the VM. To access the Connect page, you must first pick Connect from the Bastion page. Type in the private IP address of the target VM where it asks for an IP address on the Bastion Connect screen.