You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The list below corresponds to the diagram above and describes the packet flow for the inbound connection:
47
47
@@ -50,7 +50,7 @@ The list below corresponds to the diagram above and describes the packet flow fo
50
50
1. NVA inspects the traffic and translates the packet based on rule configuration. In this case, the NVA is configured to NAT and forward inbound traffic to 10.60.0.4:443. The source of the packet is also translated to the private IP (IP of trusted/internal interface) of the chosen Firewall instance to ensure flow symmetry. The NVA forwards the packet and Virtual WAN routes the packet to the final destination.
The list below corresponds to the diagram above and describes the packet flow for the outbound response:
56
56
@@ -83,35 +83,35 @@ The list below corresponds to the diagram above and describes the packet flow fo
83
83
The following section describes how to manage NVA configurations related to internet inbound and DNAT.
84
84
85
85
1. Navigate to your Virtual WAN Hub. Select **Network Virtual Appliances** under Third Party Providers. Click on **Manage Configurations** next to the NVA.
86
-
:::image type="content" source="./media/virtual-wan-nva-dnat/nva-manage-configurations.png"alt-text="Screenshot showing how to manage configurations for NVA."lightbox="./media/virtual-wan-nva-dnat/nva-manage-configurations.png":::
86
+
:::image type="content" source="./media/virtual-wan-network-virtual-appliance-inbound/manage-configurations.png"alt-text="Screenshot showing how to manage configurations for NVA."lightbox="./media/virtual-wan-network-virtual-appliance-inbound/manage-configurations.png":::
87
87
88
88
1. Select **Internet Inbound** under settings.
89
-
:::image type="content" source="./media/virtual-wan-nva-dnat/nva-select-internet-inbound.png"alt-text="Screenshot showing how to select IP to add to NVA."lightbox="./media/virtual-wan-nva-dnat/nva-select-internet-inbound.png":::
89
+
:::image type="content" source="./media/virtual-wan-network-virtual-appliance-inbound/select-internet-inbound.png"alt-text="Screenshot showing how to select IP to add to NVA."lightbox="./media/virtual-wan-network-virtual-appliance-inbound/select-internet-inbound.png":::
90
90
91
91
### Associating an IP address to an NVA for Internet Inbound
92
92
93
93
1. If the NVA is eligible for internet inbound and there are no current internet inbound IP addresses associated to the NVA, select **Enable Internet Inbound (Destination NAT) by associating a public IP to this Network Virtual Appliance**. If IPs are already associated to this NVA, select **Add**.
94
-
:::image type="content" source="./media/virtual-wan-nva-dnat/nva-add-inbound-ip.png"alt-text="Screenshot showing how to add IP to NVA."lightbox="./media/virtual-wan-nva-dnat/nva-add-inbound-ip.png":::
94
+
:::image type="content" source="./media/virtual-wan-network-virtual-appliance-inbound/add-inbound-ip.png"alt-text="Screenshot showing how to add IP to NVA."lightbox="./media/virtual-wan-network-virtual-appliance-inbound/add-inbound-ip.png":::
95
95
96
96
1. Select the resource group and the IP address resource that you want to use for internet inbound from the dropdown.
97
-
:::image type="content" source="./media/virtual-wan-nva-dnat/nva-select-ip.png"alt-text="Screenshot showing how to select an IP."lightbox="./media/virtual-wan-nva-dnat/nva-select-ip.png":::
97
+
:::image type="content" source="./media/virtual-wan-network-virtual-appliance-inbound/select-ip.png"alt-text="Screenshot showing how to select an IP."lightbox="./media/virtual-wan-network-virtual-appliance-inbound/select-ip.png":::
98
98
1. Click **save**.
99
-
:::image type="content" source="./media/virtual-wan-nva-dnat/nva-save-ip.png"alt-text="Screenshot showing how to save IP."lightbox="./media/virtual-wan-nva-dnat/nva-save-ip.png":::
99
+
:::image type="content" source="./media/virtual-wan-network-virtual-appliance-inbound/save-ip.png"alt-text="Screenshot showing how to save IP."lightbox="./media/virtual-wan-network-virtual-appliance-inbound/save-ip.png":::
100
100
101
101
### View active inbound security rules using an Internet Inbound Public IP
102
102
103
103
1. Find the Public IP you want to view and click **View rules**.
104
-
:::image type="content" source="./media/virtual-wan-nva-dnat/nva-view-rules.png"alt-text="Screenshot showing how to view rules associated to NVA."lightbox="./media/virtual-wan-nva-dnat/nva-view-rules.png":::
104
+
:::image type="content" source="./media/virtual-wan-network-virtual-appliance-inbound/view-rules.png"alt-text="Screenshot showing how to view rules associated to NVA."lightbox="./media/virtual-wan-network-virtual-appliance-inbound/view-rules.png":::
105
105
1. View the rules associated to the public IP.
106
-
:::image type="content" source="./media/virtual-wan-nva-dnat/nva-rules.png"alt-text="Screenshot showing displayed rules associated to NVA."lightbox="./media/virtual-wan-nva-dnat/nva-rules.png":::
106
+
:::image type="content" source="./media/virtual-wan-network-virtual-appliance-inbound/rules.png"alt-text="Screenshot showing displayed rules associated to NVA."lightbox="./media/virtual-wan-network-virtual-appliance-inbound/rules.png":::
107
107
108
108
### Remove Internet Inbound public IP from existing NVA
109
109
110
110
> [!NOTE]
111
111
> IP addresses can only be removed if there are no rules associated to that IP is 0. Remove all rules associated to the IP by removing DNAT rules assigned to that IP from your NVA management software.
112
112
113
-
1.Select the IP you want to remove from the grid and click **Delete**.
114
-
:::image type="content" source="./media/virtual-wan-nva-dnat/nva-delete-ip.png"alt-text="Screenshot showing how to delete IP from NVA."lightbox="./media/virtual-wan-nva-dnat/nva-delete-ip.png":::
113
+
Select the IP you want to remove from the grid and click **Delete**.
114
+
:::image type="content" source="./media/virtual-wan-network-virtual-appliance-inbound/delete-ip.png"alt-text="Screenshot showing how to delete IP from NVA."lightbox="./media/virtual-wan-network-virtual-appliance-inbound/delete-ip.png":::
0 commit comments