检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Creating a User and Granting NAT Gateway Permissions This section describes how to use IAM to implement fine-grained permissions control for your NAT Gateway resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
} nat:natGateways:update - GET /v2/{project_id}/dnat_rules nat:dnatRules:list - POST /v2/{project_id}/dnat_rules nat:dnatRules:create eip:publicIps:associateInstance GET /v2/{project_id}/dnat_rules/{dnat_rule_id} nat:dnatRules:get - PUT /v2/{project_id}/dnat_rules/{dnat_rule_id} nat
In the route table list, click the name of the route table associated with the VPC to which the private NAT gateway belongs. Check whether the route pointing to the private NAT gateway is configured in the route list. Parent topic: Private NAT Gateways
Step 3: Create a Private NAT Gateway Go to the Buy Private NAT Gateway page. On the Buy Private NAT Gateway page, configure required parameters.
Step 2: Create a Public NAT Gateway Create a public NAT gateway. Step 3: Add a Default Route Pointing to the Public NAT Gateway Add a route table.
Configuring a NAT Gateway Prerequisites A NAT gateway has been purchased and its VPC has not been associated with any cloud resources (such as cloud servers). If there are no NAT gateways available, buy a public NAT gateway. For details about NAT gateway pricing, see Billing.
Configure advanced settings for the NAT server as prompted. Table 3 NAT server advanced configuration Parameter Description ECS Name Specifies the ECS name. For more details, see SAP Note 611361. Login Mode Select Key pair.
DNAT Rules of Public NAT Gateways Permission API Action IAM Project Enterprise Project Creating a DNAT Rule POST /v2/{project_id}/dnat_rules nat:dnatRules:create √ √ Creating DNAT Rules in Batches POST /v2/{project_id}/dnat_rules/batch nat:dnatRules:create √ √ Querying DNAT Rules
SNAT Rules of Public NAT Gateways Permission API Action IAM Project Enterprise Project Creating an SNAT Rule POST /v2/{project_id}/snat_rules nat:snatRules:create √ √ Querying SNAT Rules GET /v2/{project_id}/snat_rules nat:snatRules:list √ √ Querying Details About an SNAT Rule GET
SNAT Rules of Private NAT Gateways Permission API Action IAM Project Enterprise Project Creating an SNAT Rule POST /v3/{project_id}/private-nat/snat-rules nat:privateNatSnatRules:create √ √ Querying an SNAT Rule GET /v3/{project_id}/private-nat/snat-rules/{snat_rule_id} nat:privateNatSnatRules
DNAT Rules of Private NAT Gateways Permission API Action IAM Project Enterprise Project Creating a DNAT Rule POST /v3/{project_id}/private-nat/dnat-rules nat:privateNatDnatRules:create √ √ Querying a DNAT Rule GET /v3/{project_id}/private-nat/dnat-rules/{dnat_rule_id} nat:privateNatDnatRules
Can Private NAT Gateways Translate On-premises IP Addresses Connected to the Cloud Through Direct Connect? Yes. When you are creating a DNAT rule and select Custom for Instance Type, you can add an on-premises IP address. Parent topic: Private NAT Gateways
Private NAT Gateway - Tag Permission API Action IAM Project Enterprise Project Adding a Tag to a Private NAT Gateway POST /v3/{project_id}/private-nat-gateways/{resource_id}/tags nat:privateNatGatewayTags:create √ √ Batch Adding or Deleting Tags to or from a Private NAT Gateway POST
Parent topic: Public NAT Gateways
Using Multiple Public NAT Gateways Together in Performance-Demanding Scenarios Overview Preparations Step 1: Create a VPC and Two Subnets Step 2: Buy a Public NAT Gateway Step 3: Check the Default Route Step 4: Create a Route Table Step 5: Buy Another Public NAT Gateway Step 6: Add
Adding an SNAT Rule to the NAT Gateway Scenarios This section describes how to add an SNAT rule to the public NAT gateway. Procedure Add an SNAT rule to the public NAT gateway. For details, see Adding an SNAT Rule. For SNAT rule details, see Table 7.
Preserving Your Network with NAT Gateways During Cloud Migration Overview Enabling Mutual Access Between Servers in Overlapping Subnets on the Cloud Using a Specified IP Address to Access Hosts Outside a VPC
Parent topic: Public NAT Gateways
For details, see Buying a Public NAT Gateway. For public NAT gateway planning, see Table 7. Parent topic: Creating Resources
How Many Private NAT Gateways Can I Buy in a VPC? You can buy a maximum of 10 private NAT gateways in a VPC. Parent topic: Billing FAQs
