You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-vmware/enable-public-ip-nsx-edge.md
+15-23Lines changed: 15 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -62,50 +62,42 @@ There are three options for configuring your reserved Public IP down to the NSX
62
62
63
63
A Sourced Network Translation Service (SNAT) with Port Address Translation (PAT) is used to allow many VMs to one SNAT service. This connection means you can provide Internet connectivity for many VMs.
64
64
65
-
66
-
67
65
>[!Note]
68
-
> To enable SNAT for your specified address ranges, you must [configure a gateway firewall rule](#gateway-firewall-used-to-filter-traffic-to-vms-at-t1-gateways).
69
-
70
-
>[!Note]
71
-
> Creating the following SNAT rules enables addresses ranges specified in the source. If you don't want SNAT enabled for specific address ranges, create a [No-NAT rule for the address ranges](#no-nat-rule-for-specific-address-ranges) to exclude the specified address range. For this functionality to work as expected, make the No-NAT rule a higher priority than the SNAT rule .
72
-
73
-
74
-
75
-
66
+
> To enable SNAT for your specified address ranges, you must [configure a gateway firewall rule](#gateway-firewall-used-to-filter-traffic-to-vms-at-t1-gateways). Creating a SNAT rule enables specified address ranges in the source. If you don't want SNAT enabled for specific address ranges, create a [No-NAT rule for the address ranges](#no-nat-rule-for-specific-address-ranges) to exclude the specified address range. For this functionality to work as expected, make the No-NAT rule a higher priority than the SNAT rule.
76
67
77
68
**Add rule**
78
69
1. From your Azure VMware Solution private cloud, select **vCenter Credentials**
79
70
2. Locate your NSX-T URL and credentials.
80
71
3. Log in to **VMWare NSX-T**.
81
72
4. Navigate to **NAT Rules**.
82
73
5. Select the T1 Router.
83
-
1.select**ADD NAT RULE**.
74
+
1. Select**ADD NAT RULE**.
84
75
85
76
**Configure rule**
86
77
87
78
1. Enter a name.
88
79
1. Select **SNAT**.
89
-
1. Optionally enter a source such as a subnet to SNAT or destination.
80
+
1. Optionally, enter a source such as a subnet to SNAT or destination.
90
81
1. Enter the translated IP. This IP is from the range of Public IPs you reserved from the Azure VMware Solution Portal.
91
-
1. Optionally give the rule a higher priority number. This prioritization will move the rule further down the rule list to ensure more specific rules are matched first.
82
+
1. Optionally, give the rule a higher priority number. This prioritization will move the rule further down the rule list to ensure more specific rules are matched first.
92
83
1. Click **SAVE**.
93
84
94
85
Logging can be enabled by way of the logging slider. For more information on NSX-T NAT configuration and options, see the
A No-NAT rule can be used to exclude certain matches from performing Network Address Translation. This can be used to allow private IP traffic to bypass the NAT rule.
90
+
A No NAT rule can be used to exclude certain matches from performing Network Address Translation. This policy can be used to allow private IP traffic to bypass the NAT rule.
91
+
92
+
1. From your Azure VMware Solution private cloud, select **vCenter Credentials**
93
+
2. Locate your NSX-T URL and credentials.
94
+
3. Log in to **VMWare NSX-T** and then select **3 NAT Rules**.
95
+
:::image type="content" source="media/public-ip-nsx-edge/public-ip-internet-3nat-rules.png" alt-text="Diagram that shows how to add a No Nat rule to exclude certain matches." border="false" lightbox="media/public-ip-nsx-edge/architecture-internet-access-avs-public-ip.png":::
100
96
101
-
1. Navigate to NAT Rules.
102
-
1. Select the T1 Router, and then select **ADD NAT RULE**.
103
-
1. Configure the rule.
104
-
1. Enter the name, then select No SNAT.
105
-
:::image type="content" source="media/public-ip-nsx-edge/public-ip-internet-3nat-rules.png" alt-text="Diagram that shows how to add a no-Nat rule to exclude certain matches." border="false" lightbox="media/public-ip-nsx-edge/architecture-internet-access-avs-public-ip.png":::
106
-
1. Enter the match criteria.
107
-
:::image type="content" source="media/public-ip-nsx-edge/public-ip-internet-add-nat-rule.png" alt-text="Diagram that shows how to add a T1 router to a Nat rule." border="false" lightbox="media/public-ip-nsx-edge/architecture-internet-access-avs-public-ip.png":::
108
-
1. Select **SAVE**.
97
+
1. Select the T1 Router and then select **ADD NAT RULE**.
98
+
:::image type="content" source="media/public-ip-nsx-edge/public-ip-internet-add-nat-rule.png" alt-text="Diagram that shows how to add a T1 router to a Nat rule." border="false" lightbox="media/public-ip-nsx-edge/architecture-internet-access-avs-public-ip.png":::
99
+
100
+
1. Select **SAVE**.
109
101
:::image type="content" source="media/public-ip-nsx-edge/public-ip-internet-save-no-nat.png" alt-text="Diagram that shows how to add a T1 router to a Nat rule." border="false" lightbox="media/public-ip-nsx-edge/architecture-internet-access-avs-public-ip.png":::
0 commit comments