<p>This article describes how to create a DNAT rule.</p> <p><span style="font-size:18px"><strong>Prerequisites</strong></span></p> <p>&bull;&nbsp;&nbsp;&nbsp;&nbsp; You have created an IGW.</p> <p>&bull;&nbsp;&nbsp;&nbsp;&nbsp; You have applied for DNAT Internet IP. For more information, see <a href="https://yun.pingan.com/ssr/help/network/igw/manual.5e0ab499332b702503663583.5e0ab4cf601d982608e5241c.5e0ab4decd82d9260ed70252" target="_blank">Apply for a DNAT Public IP</a>.</p> <p>&bull;&nbsp;&nbsp;&nbsp;&nbsp; You have created a classic ELB instance in East China region, and added back-end server. For more information, see&nbsp;<a href="https://yun.pingan.com/ssr/help/network/elb/index.intro" target="_blank">Product Documentation</a> of ELB.</p> <p><span style="font-size:18px"><strong>Procedures</strong></span></p> <p>1.&nbsp;Log in to <a href="https://yun.pingan.com/console/igw/overview" target="_blank">IGW Console</a>.</p> <p>2.&nbsp;In the left navigation pane, click <strong>IGW</strong> to enter the <strong>IGW </strong>page.</p> <p>3.&nbsp;Click <strong>Name</strong> of the target IGW to enter the <strong>IGW Information</strong> page.</p> <p>4.&nbsp;On the <strong>DNAT SERVICE</strong> tab, click <strong>Create</strong> in the upper-right corner of the <strong>DNAT Rules</strong> area, and the dialog box of <strong>Create DNAT Rules</strong> will open.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201707090529-13b6471292e8.png" style="height:615px; width:830px" /></p> <p>5.&nbsp;Create a DNAT rule&nbsp;based on the following information.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201707090552-1771899a9392.png" style="height:656px; width:748px" /></p> <table border="1" cellpadding="0" cellspacing="0" style="width:0px"> <tbody> <tr> <td style="background-color:#ededed; width:193px"> <p><strong>Configuration Item</strong></p> </td> <td style="background-color:#ededed; vertical-align:top; width:590px"> <p><strong>Description</strong></p> </td> </tr> <tr> <td style="width:193px"> <p>Mapping Type</p> </td> <td style="vertical-align:top; width:590px"> <p>There are two options, including <strong>IP Mapping</strong> and <strong>Port Mapping</strong>.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201707090614-1a05aee0926c.png" style="height:24px; margin:1px; width:50px" /><strong>:</strong></p> <p>&bull;&nbsp;When only a small number of fixed ports are required to provide services, the port mapping can maximize the use of a single Internet IP.</p> <p>&bull;&nbsp;When the ports required are not fixed or a large number of ports are required, you can use the IP mapping. Such an intranet instance needs an Internet IP.</p> </td> </tr> <tr> <td style="width:193px"> <p>Type of AZ</p> </td> <td style="vertical-align:top; width:590px"> <p>Select the availability zone.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201707090614-1a05aee0926c.png" style="height:24px; margin:1px; width:50px" />: The selected available zone must be consistent with that of the Internet IP and the intranet IP (the classic ELB instance).</p> </td> </tr> <tr> <td style="width:193px"> <p>Protocol Type</p> </td> <td style="vertical-align:top; width:590px"> <p>TCP.</p> </td> </tr> <tr> <td style="width:193px"> <p>Internet IP</p> </td> <td style="vertical-align:top; width:590px"> <p>Choose an Internet IP.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201707090614-1a05aee0926c.png" style="height:24px; margin:1px; width:50px" />: The Internet IP selected is the DNAT Internet IP applied by the user.</p> </td> </tr> <tr> <td style="width:193px"> <p>Internet Port Number</p> </td> <td style="vertical-align:top; width:590px"> <p>If DNAT rules type is port mapping, enter the port number.</p> </td> </tr> <tr> <td style="width:193px"> <p>Intranet IP</p> </td> <td style="vertical-align:top; width:590px"> <p>Perform the following operations to choose a classic ELB instance IP as the intranet IP:</p> <p>1.&nbsp;Click <strong>CHOOSE LB INSTANCE</strong> to open the dialog box of <strong>Choose LB Instance</strong>.</p> <p><img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201707090614-1a05aee0926c.png" style="height:24px; margin:1px; width:50px" />: In the dialog box that opens, the classic ELB instances in the DMZ network domain in the VPC where the Internet gateway is located are displayed.</p> <p>2.&nbsp;Check the ELB instance that need to connect to the Internet and click <strong>Confirm</strong>.</p> </td> </tr> <tr> <td style="width:193px"> <p>Port Range</p> </td> <td style="vertical-align:top; width:590px"> <p>If you select&nbsp;port mapping, enter the port range of the ELB instance.</p> </td> </tr> </tbody> </table> <p>6.&nbsp;Click <strong>Confirm</strong>, and &ldquo;<strong>Operation succeeded</strong>&rdquo; will appear at the bottom of the page.</p> <p><span style="font-size:18px"><strong>Result</strong></span></p> <p>In the <strong>DNAT Rules</strong> area of the <strong>DNAT SERVICE</strong> tab, you can choose <strong>IP MAPPING</strong> tab or <strong>PORT MAPPING</strong> tab based on the type of the created DNAT rule, and view the created DNAT rule.</p>