5.1

Reorder Firewall Rules for a vApp Network
Firewall rules are enforced in the order in which they appear in the firewall list. You can change the order of
the rules in the list.
When you add a new firewall rule to a vApp network, it appears at the bottom of the firewall rule list. If you
want to enforce the new rule before an existing rule, reorder the rules.
Prerequisites
A routed vApp network with two or more firewall rules.
Procedure
1 Click the My Cloud tab and click vApps in the left pane.
2 Right-click a vApp and select Open.
3 On the Networking tab, select Show networking details.
4 Right-click the vApp network and select Configure Services.
5 Click the Firewall tab.
6 Drag and drop the firewall rules to establish the order in which the rules are applied.
7 Click OK.
8 Click Apply.
Enable IP Masquerading for a vApp Network
You can configure certain vApp networks to provide IP masquerade services. Enable IP masquerading on a
vApp network to hide the internal IP addresses of virtual machines from the organization vDC network.
When you enable IP masquerade, vCloud Director translates a virtual machine's private, internal IP address
to a public IP address for outbound traffic.
Prerequisites
Verify that a routed vApp network exists.
Procedure
1 Click the My Cloud tab and click vApps in the left pane.
2 Right-click a vApp and select Open.
3 On the Networking tab, select Show networking details.
4 Right-click the vApp network and select Configure Services.
5 Click the NAT tab and select Port Forwarding.
6 Select Enable IP Masquerade and click OK.
7 Click Apply.
Add a Port Forwarding Rule to a vApp Network
You can configure certain vApp networks to provide port forwarding by adding a NAT mapping rule. Port
forwarding provides external access to services running on virtual machines on the vApp network.
When you configure port forwarding, vCloud Director maps an external port to a service running on a port
on a virtual machine for inbound traffic.
vCloud Director User's Guide
76 VMware, Inc.