vCloud Director NAT (Network Address Translation) service translates source or destination IP addresses and port numbers. In the most common case, you associate a NAT service with an uplink interface on an Edge Gateway so that addresses on organization VDC networks are not exposed on the external network.

You can view/create/edit/delete NAT rules using OnApp Control Panel.

This functionality is available for users with the vCloud Organization Administrator role.

Create NAT Rules

To add a new NAT rule for NSX integration:

  1. Go to your Control Panel > Cloud > Edge Gateways > Edge gateway's label > Nat Service tab.
  2. Click the "+" button.
  3. On the page that appears specify the following parameters:
    For DNAT rules:
    • Applied on - select the vCloud Director external network where the rule will be applied
    • Protocol - select the type of protocol (TCP, UDP, ICMP or Any)
    • Original IP - specify the original IP address to apply this rule on 
    • Original port - specify the port of original IP address
    • Translated IP - specify the IP address to translate the addresses of outgoing packets to
    • Translated port - specify the port of translated IP address
    • Description - add description if any

          For SNAT rules:

    • Applied on - select the vCloud Director external network where the rule will be applied
    • Original IP - specify original IP address to apply this rule on and click the "?" icon to configure IP nets and IP ranges
    • IP Net - select an IP net from which the original IP address should be assigned
    • IP Range - select an IP range from which the original IP address should be assigned
    • Translated IP - specify the IP address to translate the addresses of outgoing packets to and click the "?" icon to configure IP nets and IP ranges
    • IP Net - select an IP range from which the translated IP address should be assigned
    • IP Range - select an IP range from which the translated IP address should be assigned
    • Description - add description if any

        4. Click the Apply Rules button to save the changes.




Edit NAT Rule

  1. Go to your Control Panel > Cloud > Edge Gateways > Edge gateway's label > Nat Service tab.
  2. Click the icon next to the NAT rule, which you want to edit.
  3. On the page that appears change the following parameters:
    For DNAT rules:
    • Applied on - select the vCloud Director external network where the rule will be applied
    • Protocol - select the type of protocol (TCP, UDP, ICMP or Any)
    • Original IP - specify the original IP address to apply this rule on 
    • Original port - specify the port of original IP address
    • Translated IP - specify the IP address to translate the addresses of outgoing packets to
    • Translated port - the port of translated IP address
    • Description - add description if any

          For SNAT rules:

    • Applied on - select the vCloud Director external network where the rule will be applied
    • Original IP - specify original IP address to apply this rule on and click the "?" icon to configure IP nets and IP ranges
    • IP Net - select an IP net from which the original IP address should be assigned
    • IP Range - select an IP range from which the original IP address should be assigned
    • Translated IP - specify the IP address to translate the addresses of outgoing packets to and click the "?" icon to configure IP nets and IP ranges
    • IP Net - select an IP net from which the translated IP address should be assigned
    • IP Range - select an IP range from which the translated IP address should be assigned
    • Description - add description if any

         4. Click the Apply Rules button to save the changes.



Delete NAT Rules

To delete a NAT rule:

  1. Go to your Control Panel > Cloud > Edge Gateways > Edge gateway's label
  2. Click the Nat Service tab.
  3. On the page that appears you will see the list of all NAT rules.
  4.  Select a rule from the list, and then click the  button above the table.
  5. Click the Save button to apply the changes.


 

See also: