5.5

Add a Destination NAT rule to an Edge Gateway
A destination NAT rule translates the IP address and port of packets received by an organization virtual
datacenter network coming from another organization virtual datacenter network or an external network.
Procedure
1 Click the Manage & Monitor tab and click Organization VDCs in the left pane.
2 Double-click the organization virtual datacenter name to open the organization virtual datacenter.
3 Click the Edge Gateways tab, right-click the edge gateway name and select Edge Gateway Services.
4 Click the NAT tab and click Add DNAT.
5 Select an external network or another organization virtual datacenter network to apply this rule on
from the Apply to drop-down menu.
6 Type the original IP address or range of IP addresses to apply this rule on in the Original (External)
IP/range text box.
7 Choose the Protocol to apply this rule on from the drop-down menu.
To apply this rule on all protocols, select Any.
8 (Optional) Select an Original port to apply this rule to.
9 (Optional) Select an IMCP type to apply this rule to if this rule applies to IMCP.
10 Type the IP address or range of IP addresses for the destination addresses on inbound packets to be
translated to in the Translated (Internal) IP/range text box.
11 (Optional) Select a port for inbound packets to be translated to from the Translated port drop-down
menu.
12 Select Enabled, and click OK.
The destination IP address and port are translated according to the destination NAT rule's specifications.
Configure the Firewall for an Edge Gateway
Edge gateways provide firewall protection for incoming and outgoing sessions.
You can set the default firewall action to deny or allow all traffic. You can also add specific firewall rules to
allow or deny traffic that matches the rules to pass through the firewall. These rules take precedence over
the set default. See “Add a Firewall Rule for an Edge Gateway,” on page 71
System administrators and organization administrators can configure edge gateway firewalls.
Procedure
1 Click the Manage & Monitor tab and click Organization VDCs in the left pane.
2 Double-click the organization virtual datacenter name to open the organization virtual datacenter.
3 Click the Edge Gateways tab, right-click the edge gateway name, and select Edge Gateway Services.
4 Click the Firewall tab and select Enable firewall to enable firewall services, or deselect it to disable
firewall services.
vCloud Director Administrator's Guide
70 VMware, Inc.