Quantcast
Channel: VMware Communities : All Content - vCloud Networking and Security
Viewing all articles
Browse latest Browse all 890

VSE Loopback NAT or Hairpin NAT ?

$
0
0

Hi guys

 

dead simple setup:

 

Internal network : 10.0.0.0/24 (with the VSE on 10.0.0.1)

External (Uplink) network : 85.232.32.0/24 (with the gateway on 85.232.32.1)

VSE configured with 85.232.32.2, 85.232.32.3, 85.232.32.3 etc

 

Two VMs on 10.0.0.2 & 10.0.0.3 with their default gateways set to 10.0.0.1 (the VSE)

 

Two NAT rules for each VM aka 1-2-1 NAT or bidirectional NAT

 

Source NAT 10.0.0.2 -> 85.232.32.2

Source NAT 10.0.0.3 -> 85.232.32.3

Dest NAT 85.232.32.2 -> 10.0.0.2

Dest NAT 85.232.32.3 -> 10.0.0.3

 

(for now, default Firewall policy of allow anything)

 

VMs can get out to the internet just fine. Traffic from the internet hits the VMs just fine via NAT. All OK.

 

However, if VM#1 wants to get to VM#2 via their public IPs, this does not work. A fairly common scenario.

 

The typical fix is to add a destination NAT rule on the internal interface, but this isn't working.

 

Anyone got loopback NAT working ?

 

cheers

Lee.


Viewing all articles
Browse latest Browse all 890

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>