You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: includes/vpn-gateway-nat-limitations.md
+9-8Lines changed: 9 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,18 +2,19 @@
2
2
author: cherylmc
3
3
ms.service: vpn-gateway
4
4
ms.topic: include
5
-
ms.date: 03/30/2023
5
+
ms.date: 04/03/2023
6
6
ms.author: cherylmc
7
7
---
8
8
9
9
> [!IMPORTANT]
10
10
> There are a few constraints for the NAT feature.
11
-
* NAT is supported on the following SKUs: VpnGw2~5, VpnGw2AZ~5AZ.
11
+
12
+
* NAT is supported on the following SKUs: `VpnGw2~5, VpnGw2AZ~5AZ`.
12
13
* NAT is supported for IPsec/IKE cross-premises connections only. VNet-to-VNet connections or P2S connections aren't supported.
13
-
* NAT rules can't be associated with connection resources during the create connection process. Create the connection resource first, then associate the NAT rules in the Connection Configuration page.
14
-
* Address spaces for different local network gateways (on-premises networks or branches) can be the same with *IngressSNAT*rules to map to nonoverlapping prefixes as shown in the configuration for [Diagram 1](../articles/vpn-gateway/nat-howto.md#diagram) in the NAT configuration article.
15
-
* NAT rules aren't supported on connections that have*Use Policy Based Traffic Selectors*enabled.
14
+
* NAT rules can't be associated with connection resources during create connection process. Create the connection resource first, then associate the NAT rules in the Connection Configuration page.
15
+
* Address spaces for different local network gateways (on-premises networks or branches) can be same as Ingress SNAT rules can be mapped to different prefixes.
16
+
* NAT rules aren't supported on connections that haveUse Policy Based Traffic Selectorsenabled.
16
17
* The maximum supported external mapping subnet size for Dynamic NAT is /26.
17
-
*NAT configuration isn't available for Dynamic NAT.
18
-
* Port ranges can't be entered at this time. Individual ports need to be entered. Port ranges can be configured with Static NAT types only. This can be configured for Static NAT type only.
19
-
* Port mappings can be used for both TCP and UDP protocols.
18
+
*Port mappings can be configured with Static NAT types only. Dynamic NAT scenarios are not applicable for port mappings.
19
+
* Port mappings cannot take ranges at this time. Individual port needs to be entered.
20
+
* Port mappings can be used for both TCP and UDP protocols.
0 commit comments