检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Creating a User and Granting NAT Gateway Permissions This section describes how to use IAM to implement fine-grained permissions control for your NAT Gateway resources. With IAM, you can: Create IAM users for employees based on your enterprise's organizational structure.
Step 3: Create a Private NAT Gateway Go to the Buy Private NAT Gateway page. On the Buy Private NAT Gateway page, configure required parameters.
Configuring a NAT Gateway Prerequisites A NAT gateway has been purchased and its VPC has not been associated with any cloud resources (such as cloud servers). If there are no NAT gateways available, buy a public NAT gateway. For details about NAT gateway pricing, see Billing.
Step 2: Create a Public NAT Gateway Create a public NAT gateway. Step 3: Add a Default Route Pointing to the Public NAT Gateway Add a route table.
Configure advanced settings for the NAT server as prompted. Table 3 NAT server advanced configuration Parameter Description ECS Name Specifies the ECS name. For more details, see SAP Note 611361. Login Mode Select Key pair.
Can Private NAT Gateways Translate On-premises IP Addresses Connected to the Cloud Through Direct Connect? Yes. When you are creating a DNAT rule and select Custom for Instance Type, you can add an on-premises IP address. Parent topic: Private NAT Gateways
DNAT Rules of Public NAT Gateways Permission API Action IAM Project Enterprise Project Creating a DNAT Rule POST /v2/{project_id}/dnat_rules nat:dnatRules:create √ √ Creating DNAT Rules in Batches POST /v2/{project_id}/dnat_rules/batch nat:dnatRules:create √ √ Querying DNAT Rules
SNAT Rules of Public NAT Gateways Permission API Action IAM Project Enterprise Project Creating an SNAT Rule POST /v2/{project_id}/snat_rules nat:snatRules:create √ √ Querying SNAT Rules GET /v2/{project_id}/snat_rules nat:snatRules:list √ √ Querying Details About an SNAT Rule GET
SNAT Rules of Private NAT Gateways Permission API Action IAM Project Enterprise Project Creating an SNAT Rule POST /v3/{project_id}/private-nat/snat-rules nat:privateNatSnatRules:create √ √ Querying an SNAT Rule GET /v3/{project_id}/private-nat/snat-rules/{snat_rule_id} nat:privateNatSnatRules
DNAT Rules of Private NAT Gateways Permission API Action IAM Project Enterprise Project Creating a DNAT Rule POST /v3/{project_id}/private-nat/dnat-rules nat:privateNatDnatRules:create √ √ Querying a DNAT Rule GET /v3/{project_id}/private-nat/dnat-rules/{dnat_rule_id} nat:privateNatDnatRules
Private NAT Gateway - Tag Permission API Action IAM Project Enterprise Project Adding a Tag to a Private NAT Gateway POST /v3/{project_id}/private-nat-gateways/{resource_id}/tags nat:privateNatGatewayTags:create √ √ Batch Adding or Deleting Tags to or from a Private NAT Gateway POST
Parent topic: Public NAT Gateways
Adding an SNAT Rule to the NAT Gateway Scenarios This section describes how to add an SNAT rule to the public NAT gateway. Procedure Add an SNAT rule to the public NAT gateway. For details, see Adding an SNAT Rule. For SNAT rule details, see Table 7.
Using Multiple Public NAT Gateways Together in Performance-Demanding Scenarios Overview Preparations Step 1: Create a VPC and Two Subnets Step 2: Buy a Public NAT Gateway Step 3: Check the Default Route Step 4: Create a Route Table Step 5: Buy Another Public NAT Gateway Step 6: Add
For details, see Buying a Public NAT Gateway. For public NAT gateway planning, see Table 7. Parent topic: Creating Resources
Preserving Your Network with NAT Gateways During Cloud Migration Overview Enabling Mutual Access Between Servers in Overlapping Subnets on the Cloud Using a Specified IP Address to Access Hosts Outside a VPC
Parent topic: Public NAT Gateways
ALM-4285603840 NAT Packet Discard Description NAT/4/NAT_PACKET_DISCARD: OID [OID] Interface [OCTET] had discarded packets, due to lack of mapping space when NAT is out of addresses. The NAT address pool resources are insufficient.
How Many Private NAT Gateways Can I Buy in a VPC? You can buy a maximum of 10 private NAT gateways in a VPC. Parent topic: Billing FAQs
What Are the Relationships and Differences Between the CIDR Blocks in a NAT Gateway and in an SNAT Rule? When creating a NAT gateway, you must specify the VPC and subnet CIDR block for the NAT gateway. This CIDR block can only be used by the system.
