Deploying NAT Services on NSX-T

There may be instances when you want to leverage NSX-T for NAT services and not an external NAT services. Thanks to the simplified management of NSX-T deploying these services is easy.

Terms:
Source NAT (SNAT): translates a source IP address of outbound packets so that packets appears as originating from a different network

Destination NAT (DNAT): translates the destination IP address of inbound packets so that packets are delivered to a target address into another network

Let’s get to the install:
Networking>Tier-1 Gateways>Add Tier-1 Gateway

NSX-T Tier-1 Gateways page where the NAT-enabled gateway will be created.
Tier-1 gateway editor with fields for the NAT gateway name, linked Tier-0, failover, edge cluster, and tags.

Give it a name – I recommend putting NAT in the name

Assign it to a T0 router

Put it into an existing Edge of your desire

  • Under route advertisement
    • All static routes
    • All connected segments & service ports
    • All NAT Ips

Then save & confirm NAT router is up

NSX-T gateway row showing the newly configured NAT Tier-1 gateway in Up status.

Create a segment that connects to the NAT network

NSX-T segment editor for connecting a new logical segment to the NAT Tier-1 gateway.
  • Give a name
  • Select the NAT router
  • Keep flexible
  • Select an overlay network for transport zone
  • Set subnets>add subnets
Set Subnets dialog for the NAT-connected segment before its gateway subnet is added.

Apply>Save

NSX-T NAT page for the gateway where source and destination NAT rules are managed.

Finally you will want to set up the NAT rules that will applied to the new NAT Router.

NAT rule editor with name, DNAT or SNAT action, source, destination, translated IP, service, and scope fields.

Summary
The new feature of configuring NAT services is simple and easy to setup. As the feature set continues to grow with 2.4 it won’t be long until NSX-T can run it’s own eco system.

Keep exploring

Choose your next step

Continue with the path that best matches the architecture or operating challenge in front of you.

Leave a Reply

Discover more from Digital Thought Disruption

Subscribe now to keep reading and get access to the full archive.

Continue reading