NAT with Destination Port is ignored if a Translated Port (Service) is not specified.

Products

• VMware NSX
• VMware NSX-T Data Center
• VMware NSX Networking

Issue/Introduction

The port configuration will not be effective in a NAT rule (SNAT or DNAT) where a Destination Port is configured without a corresponding Translated Port (Service). 

Environment

VMware NSX-T Data Center, VMware NSX

Cause

This is an expected behaviour if the Translated Port (Service) is unconfigured.

Please refer to an example DNAT rule below where it is configured to match destination IP of 192.168.1.1 and destination port of 8080 to translate to a destination IP of 10.0.0.1 but without a Translated Port (Service) is configured . 

Note that the destination port configuration is ignored after checking the NAT config from the CLI

 With both the Destination Port and Translated Port (Service) configured:

Note that the destination port configuration is in placed after Translated Port (Service) are configured.

Resolution

Configured the Translated Port (Service) for the NAT rule if the destination port is configured. Otherwise, the destination port configure will be ignored.

Additional Information