I know this is an older post but I have modified the scripts referenced below to load any number of Edge Gateway NAT rules at one time. See below: I'm using PowerCLI 5.8 with the below snapins. I've attached a sample csv.
param(
[Parameter(Mandatory = $true,Position = 0)][string]$te #this is the org name
)
#region Module/Snapin/Dot Sourcing
#Load SnapIns related to VMWare
$snapinList = @( 'VMware.VimAutomation.Core', 'VMware.VimAutomation.Vds', 'VMware.VimAutomation.License', 'VMware.DeployAutomation', 'VMware.ImageBuilder', 'VMware.VimAutomation.Cloud')
foreach($snapin in $snapinList)
{
if(!(Get-PSSnapin $snapin -ErrorAction:SilentlyContinue))
{
Add-PSSnapin $snapin
}
}
#endregion Module/Snapin/Dot Sourcing
Connect-CIServer -Server 10.1.0.34 -User [USERNAME] -Password [Password]
$EdgeGateway = 'EdgeGW-' + $te
$extNet = Get-ExternalNetwork | Where-Object {$_.Name -eq 'vCD-ExternalNetwork'}
Function New-GatewayRule
{
param
(
[System.Object]
$EdgeGateway,
[System.Object]
$ExternalNetwork
)
$Edgeview = Search-Cloud -QueryType EdgeGateway -name $EdgeGateway | Get-CIView
if (!$Edgeview)
{
Write-Warning -Message "Edge Gateway with name $Edgeview not found"
#Exit
}
$URI = ($Edgeview.Href + '/action/configureServices')
$wc = New-Object -TypeName System.Net.WebClient
# Add Authorization headers
$wc.Headers.Add('x-vcloud-authorization', $Edgeview.Client.SessionKey)
$wc.Headers.Add('Content-Type', 'application/vnd.vmware.admin.edgeGatewayServiceConfiguration+xml')
$wc.Headers.Add('Accept', 'application/*+xml;version=5.1')
$webclient = New-Object -TypeName system.net.webclient
$webclient.Headers.Add('x-vcloud-authorization',$Edgeview.Client.SessionKey)
$webclient.Headers.Add('accept',$Edgeview.Type + ';version=5.1')
[xml]$EGWConfXML = $webclient.DownloadString($Edgeview.href)
[xml]$OriginalXML = $EGWConfXML.EdgeGateway.Configuration.EdgegatewayServiceConfiguration.NatService.outerxml
$NewID = [int]($OriginalXML.NatService.natrule |
Sort-Object -Property id |
Select-Object -Property Id -Last 1).id + 1
If($NewID -eq 1)
{
$NewID = 65537
}
$csv = Import-Csv -Path [Path to CSV]
foreach($line in $csv | Where-Object {$_.Type -ne 'SNAT'})
{
$NewID = $line.ID
$OriginalIP = ($line.OriginIP + $line.Octet)
$OriginalPort = $line.SourcePort
$TranslatedIP = $line.translatedIP
$TranslatedPort = $line.DestPort
$Protocol = $line.Protocol
$strXML += '<NatRule>
<RuleType>DNAT</RuleType>
<IsEnabled>true</IsEnabled>
<Id>' + $NewID + '</Id>
<GatewayNatRule>
<Interface type="application/vnd.vmware.admin.network+xml" name="' + $ExternalNetwork.Name + '" href="' + $ExternalNetwork.Href + '"/>
<OriginalIp>' + $OriginalIP + '</OriginalIp>
<OriginalPort>' + $OriginalPort + '</OriginalPort>
<TranslatedIp>' + $TranslatedIP + '</TranslatedIp>
<TranslatedPort>' + $TranslatedPort + '</TranslatedPort>
<Protocol>' + $Protocol + '</Protocol>
</GatewayNatRule>
</NatRule>'
}
foreach($line in $csv | Where-Object {$_.Type -eq 'SNAT'})
{
$NewID = $line.ID
$OriginalIP = $line.translatedIP
$OriginalPort = $line.SourcePort
$TranslatedIP = ($line.OriginIP + $line.Octet)
$TranslatedPort = $line.DestPort
$Protocol = $line.Protocol
$strXML += '<NatRule>
<RuleType>SNAT</RuleType>
<IsEnabled>true</IsEnabled>
<Id>' + $NewID + '</Id>
<GatewayNatRule>
<Interface type="application/vnd.vmware.admin.network+xml" name="' + $ExternalNetwork.Name + '" href="' + $ExternalNetwork.Href + '"/>
<OriginalIp>' + $OriginalIP + '</OriginalIp>
<TranslatedIp>' + $TranslatedIP + '</TranslatedIp>
</GatewayNatRule>
</NatRule>'
}
$GoXML = '<?xml version="1.0" encoding="UTF-8"?>
<EdgeGatewayServiceConfiguration xmlns="http://www.vmware.com/vcloud/v1.5" >
<NatService>
<IsEnabled>true</IsEnabled>'
$OriginalXML.NatService.NatRule | ForEach-Object -Process {
$GoXML += $_.OuterXML
}
$GoXML += $strXML
$GoXML += '</NatService>
</EdgeGatewayServiceConfiguration>'
[byte[]]$byteArray = [System.Text.Encoding]::ASCII.GetBytes($GoXML)
$UploadData = $wc.UploadData($URI, 'POST', $byteArray)
}
New-GatewayRule -EdgeGateway $EdgeGateway -ExternalNetwork $extNet
Whenever you get time try to go through Exploring the vCloud REST API Part 1 | VMware vSphere Blog - VMware Blogs .Once you log-in to the Solution it is very easy task.