Help Center/ NAT Gateway/ User Guide (Kuala Lumpur Region)/ Managing DNAT Rules/ Importing and Exporting DNAT Rules Using Templates
Updated on 2022-08-08 GMT+08:00

Importing and Exporting DNAT Rules Using Templates

Scenarios

After a NAT gateway is created, you can add DNAT rules to allow servers in your VPC to provide services accessible from the Internet.

You can configure a DNAT rule for each port of a server. If multiple servers need to provide services accessible from the Internet, create multiple DNAT rules.

Prerequisites

A NAT gateway has been created.

Procedure

  1. Log in to the management console.
  2. Under Network, choose NAT Gateway.
  3. On the displayed page, click the name of the NAT gateway for which you want to add the DNAT rule.
  4. On the NAT gateway details page, click the DNAT Rules tab.
  5. On the displayed page, click Import Rule and then Download Template.
  6. Fill in DNAT rule parameters based on the table heading in the template. For details, see Table 1.
    Table 1 Parameter descriptions

    Parameter

    Description

    Scenario

    VPC: Servers in the VPC can share an EIP to provide services accessible from the Internet through the DNAT rule.

    Direct Connect: Servers in your data center that are connected to a VPC using Direct Connect or VPN can provide services accessible from the Internet through the DNAT rule.

    Port Type

    The port type. You can select All ports or Specific port.

    • All ports: This is equivalent to assigning an EIP to a server. Any requests on the EIP will be forwarded by the NAT gateway to your server based on IP address mapping.
    • Specific port: The NAT gateway only forwards requests with a specific protocol and port on the EIP to the corresponding port of the target server.

    Protocol

    The protocol can be TCP or UDP. This parameter is available if you select Specific port for Port Type. If you select All ports, the value of this parameter will be All by default.

    EIP

    The EIP that will be used by the server to provide services accessible from the Internet.

    Only EIPs that have not been bound or that have been bound to a DNAT rule in the current VPC are available for selection.

    Outside Port

    The EIP port. This parameter is available if you select Specific port for Port Type.

    You can enter a single port number or a port range, for example, 80 or 80-100.

    Private IP Address

    • In a VPC scenario, set this parameter to the IP address of the server in a VPC. This IP address is used by the server to provide services accessible from the Internet through DNAT.
    • In a Direct Connect scenario, set this parameter to the IP address of the server in the local data center or the user's private IP address. This IP address is used by local servers that are connected to a VPC through Direct Connect or VPN to provide services accessible from the Internet through DNAT.

    Inside Port

    • In a VPC scenario, set this parameter to the port of the server in a VPC.
    • In a Direct Connect scenario, set this parameter to the port of the server in the local data center or the user's private port.
    • This parameter is available if you select Specific port for Port Type.

    The number of inside and outside ports must match.

  7. After filling in the template, click Import Rule, select the template, and click Import.
  8. View details in the DNAT rule list. If Status is Running, the rules have been added.
  9. On the DNAT Rules tab page, click Export Rule to export the configured DNAT rule template.