Skip to content

Commit 515c340

Browse files
authored
Merge pull request #233197 from cherylmc/patch-7
Update vpn-gateway-nat-limitations.md
2 parents c0fad4e + 77d8c56 commit 515c340

File tree

1 file changed

+9
-8
lines changed

1 file changed

+9
-8
lines changed

includes/vpn-gateway-nat-limitations.md

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2,18 +2,19 @@
22
author: cherylmc
33
ms.service: vpn-gateway
44
ms.topic: include
5-
ms.date: 03/30/2023
5+
ms.date: 04/03/2023
66
ms.author: cherylmc
77
---
88

99
> [!IMPORTANT]
1010
> There are a few constraints for the NAT feature.
11-
* NAT is supported on the following SKUs: VpnGw2~5, VpnGw2AZ~5AZ.
11+
12+
* NAT is supported on the following SKUs: `VpnGw2~5, VpnGw2AZ~5AZ`.
1213
* NAT is supported for IPsec/IKE cross-premises connections only. VNet-to-VNet connections or P2S connections aren't supported.
13-
* NAT rules can't be associated with connection resources during the create connection process. Create the connection resource first, then associate the NAT rules in the Connection Configuration page.
14-
* Address spaces for different local network gateways (on-premises networks or branches) can be the same with *IngressSNAT* rules to map to nonoverlapping prefixes as shown in the configuration for [Diagram 1](../articles/vpn-gateway/nat-howto.md#diagram) in the NAT configuration article.
15-
* NAT rules aren't supported on connections that have *Use Policy Based Traffic Selectors* enabled.
14+
* NAT rules can't be associated with connection resources during create connection process. Create the connection resource first, then associate the NAT rules in the Connection Configuration page.
15+
* Address spaces for different local network gateways (on-premises networks or branches) can be same as Ingress SNAT rules can be mapped to different prefixes.
16+
* NAT rules aren't supported on connections that have Use Policy Based Traffic Selectors enabled.
1617
* The maximum supported external mapping subnet size for Dynamic NAT is /26.
17-
* NAT configuration isn't available for Dynamic NAT.
18-
* Port ranges can't be entered at this time. Individual ports need to be entered. Port ranges can be configured with Static NAT types only. This can be configured for Static NAT type only.
19-
* Port mappings can be used for both TCP and UDP protocols.
18+
* Port mappings can be configured with Static NAT types only. Dynamic NAT scenarios are not applicable for port mappings.
19+
* Port mappings cannot take ranges at this time. Individual port needs to be entered.
20+
* Port mappings can be used for both TCP and UDP protocols.

0 commit comments

Comments
 (0)