Add NSX NAT Rule with service entry configured with port number range

pearl1594 — Thu, 26 Oct 2023 15:42:55 GMT

Hi,

As per the documentation it seems like it is possible to add a port range for translated ports when creating an NSX NAT rule, however, on doing so, it seems to fail

Any help understanding what I may be doing wrong in the configuration would greatly be appreciated.

Thanks!

Re: Add NSX NAT Rule with service entry configured with port number range

EvertAM — Wed, 01 Nov 2023 23:23:11 GMT

I believe your issue might be that you're adding multiple ports to both the original and the translated ports. Adding multiple ports is generally used for NAT overload.

Based in your screenshot, you're trying to NAT all traffic to an IP, but only allow certain ports in. This would be better handled using a firewall rule. If you are specifically trying to NAT only 3 ports (while handling traffic to other ports differently), I think you'll need multiple NAT rules.

topic Re: Add NSX NAT Rule with service entry configured with port number range in VMware NSX Discussions

Add NSX NAT Rule with service entry configured with port number range

Re: Add NSX NAT Rule with service entry configured with port number range