Skip to content

Commit d41f663

Browse files
authored
Merge pull request #190788 from aimee-littleton/patch-37
Clarify UDR types
2 parents 54182b3 + f8f7340 commit d41f663

File tree

2 files changed

+6
-6
lines changed

2 files changed

+6
-6
lines changed

articles/virtual-network/nat-gateway/nat-overview.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ NAT is fully scaled out from the start. There's no ramp up or scale-out operatio
4646

4747
* Outbound connectivity can be defined for each subnet with NAT. Multiple subnets within the same virtual network can have different NATs. Or multiple subnets within the same virtual network can use the same NAT. A subnet is configured by specifying which NAT gateway resource to use. All outbound traffic for the subnet is processed by NAT automatically without any customer configuration. NAT takes precedence over other outbound scenarios and replaces the default Internet destination of a subnet.
4848

49-
* Presence of UDRs for virtual appliances and virtual network gateways override NAT gateway for directing internet bound traffic (route to the 0.0.0.0/0 address prefix). See [Troubleshooting NAT gateway](./troubleshoot-nat.md#udr-supersedes-nat-gateway-for-going-outbound) to learn more.
49+
* Presence of UDRs for virtual appliances and virtual network gateways override NAT gateway for directing internet bound traffic (route to the 0.0.0.0/0 address prefix). See [Troubleshooting NAT gateway](./troubleshoot-nat.md#virtual-appliance-and-virtual-network-gateway-udrs-supersede-nat-gateway-for-going-outbound) to learn more.
5050

5151
* NAT supports TCP and UDP protocols only. ICMP isn't supported.
5252

articles/virtual-network/nat-gateway/troubleshoot-nat.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ This article provides guidance on how to configure your NAT gateway to ensure ou
3838
Check the following configurations to ensure that NAT gateway can be used to direct traffic outbound:
3939
1. At least one public IP address or one public IP prefix is attached to NAT gateway. At least one public IP address must be associated with the NAT gateway for it to provide outbound connectivity.
4040
2. At least one subnet is attached to a NAT gateway. You can attach multiple subnets to a NAT gateway for going outbound, but those subnets must exist within the same virtual network. NAT gateway cannot span beyond a single virtual network.
41-
3. No [NSG rules](../network-security-groups-overview.md#outbound) or [UDRs](#udr-supersedes-nat-gateway-for-going-outbound) are blocking NAT gateway from directing traffic outbound to the internet.
41+
3. No [NSG rules](../network-security-groups-overview.md#outbound) or [UDRs](#virtual-appliance-and-virtual-network-gateway-udrs-supersede-nat-gateway-for-going-outbound) are blocking NAT gateway from directing traffic outbound to the internet.
4242

4343
### How to validate connectivity
4444

@@ -156,15 +156,15 @@ Test and resolve issues with VMs holding on to old SNAT IP addresses by:
156156

157157
If you are still having trouble, open a support case for further troubleshooting.
158158

159-
### UDR supersedes NAT gateway for going outbound
159+
### Virtual appliance and virtual network gateway UDRs supersede NAT gateway for going outbound
160160

161-
When NAT gateway is attached to a subnet also associated with a user defined route (UDR) for routing traffic to the internet, the UDR will take precedence over the NAT gateway. The internet traffic will flow from the IP configured for the UDR rather than from the NAT gateway public IP address(es).
161+
When NAT gateway is attached to a subnet also associated with a user defined route (UDR) for a virtual appliance or virtual network gateway, the UDR will take precedence over the NAT gateway for internet routed traffic. The internet traffic will flow from the IP configured for the UDR rather than from the NAT gateway public IP address(es).
162162

163163
The order of precedence for internet routing configurations is as follows:
164164

165-
UDR >> NAT gateway >> default system
165+
Virtual appliance / Virtual network gateway UDR >> NAT gateway >> default system
166166

167-
Test and resolve issues with a UDR configured to your virtual network by:
167+
Test and resolve issues with a virtual appliance or virtual network gateway UDR configured to your virtual network by:
168168
1. [Testing that the NAT gateway public IP](./tutorial-create-nat-gateway-portal.md#test-nat-gateway) is used for outbound traffic. If a different IP is being used, it could be because of a UDR, follow the remaining steps on how to check for and remove UDRs.
169169
2. Check for UDRs in the virtual network’s route table, refer to [view route tables](../manage-route-table.md#view-route-tables).
170170
3. Remove the UDR from the route table by following [create, change, or delete an Azure route table](../manage-route-table.md#change-a-route-table).

0 commit comments

Comments
 (0)