vcenter for nat

[User003]

hi, I have a vCenter located behind nat and a group of hosts with a public ip when connecting hosts to vCenter using changes in the file /etc/vmware/vpxa/vpxa. cfg <serverIp>10.0.0.1< / serverIp> to an external IP address <preserveServerIp>true</preserveServerIp> the hosts are visible in vcenter but an error appears in the logs

[2021-09-21 17:53:21:330 'HostUpdateDepotManager' 139669465257728 ERROR]  [scanHost20, 371] result for host: **** (entity: host-26900) shows error :
-----Result Begin (*****)-----
<esxupdate-response>
<version>1.50</version>
<error errorClass="MetadataDownloadError">
  <errorCode>4</errorCode>
  <errorDesc>Failed to download metadata.</errorDesc>
  <url>http://192.168.1.10:9084/vum/repository/hostupdate/vmw/vmw-ESXi-6.7.0-metadata.zip</url>
  <localfile>None</localfile>
  <msg>('http://192.168.1.10:9084/vum/repository/hostupdate/vmw/vmw-ESXi-6.7.0-metadata.zip', '/tmp/tmpfquu19yt', '&lt;urlopen error timed out&gt;')</msg>
</error>
</esxupdate-response>

it turns out that the host is still trying to access the vcenter on the internal ip, how can this problem be solved?