Port range configuration in DNAT on NSX

Products

• VMware NSX

Issue/Introduction

NSX UI does not allow the configuration of port ranges in the DNAT in Translated port section, and the same fails with the below error message:
 [error_code=10503, module_name=ROUTING, error_message='[NAT] "translated_ports" of NAT action DNAT does NOT support port range.

Environment

VMware NSX

VMware NSX-T Data Center

Cause

This is a known issue, NSX UI currently does not allow port ranges in the Translated service/Port field on NAT.

Resolution

Workaround:

1. Create DNAT with dest_ip, dest_port/range and translated_ip,
2. Create new service entry with protocol(like TCP/UDP etc..), without any port from policy UI as below: