NSX NAT configuration guide

Every time a VDC is deployed, Abiquo will create a NSX edge and connect it to the PLR. Each VDC will have a set of NAT interfaces and routing to those interfaces will be configured in the PLR on demand. External access to virtual machines will be enabled by configuring DNAT rules, and Internet access will be provided to the different private networks by configuring the corresponding SNAT rules for the NAT addresses.

NSX NAT diagram

Limitations

Maximum 9 total self-service interfaces in the edge, to be assigned to NAT or to private networks.
Load balancers do not support firewalls.

Abiquo properties

The following properties are global to the platform and must be configured in the API Server and Remote Services appliances.

Name	Description
abiquo.nsx.transport-zone	The transport zone where the networks created by Abiquo will be attached.
abiquo.nsx.edge.cluster-id	Identifier (in VCenter) of the cluster where Abiquo will deploy the ESG.
abiquo.nsx.edge.datastore-id	CSV list of identifiers (in VCenter) of the datastores where Abiquo can deploy the ESG appliances according to the datastore-policy
abiquo.nsx.edge.datastore-policy	Allocation policy for selection of datastores to deploy ESG appliances. Default: leastvms Range: leastvms, mostspace
abiquo.nsx.load-balancer-reserved-ips	Number of IP addresses that are reserved for NSX in each private network to allocate to load balancers. Default: 20 The gateway can be address 1. The reserved IPs range starts from address 2 for the number of IPs configured by the user, by default, up to address 21 Users should work with automatic IP allocation. In any case, the system administrator should inform the users of the range and by default, the first free address is address 22
abiquo.nsx.edge.plr-esg-id	ID of the Edge that acts as the PLR.
abiquo.nsx.edge.plr-transit-cidr	CIDR for the transit network network to be used between the PLR and the Edges of each Abiquo Virtual Datacenter.
abiquo.nsx.edge.plr-transit-ip	IP address from the PLR transit network to be assigned to the PLR. If not set, the first IP address in the network will be assigned.

The following properties can be configured globally or per tenant. See Manage tenant properties to configure them as tenant properties.

To configure properties globally in the DC Remote Server properties, add an abiquo. prefix to their names, such as abiquo.nsx.esg.size.

Name

Description

nsx.virtualwire.teaming

Use this property to set the teaming policy for the portGroup that is the backing for the VirtualWire when it is created. This value cannot be changed after it is created.
Default: "failover_explicit"
Values: "failover_explicit", "loadbalance_ip", "loadbalance_loadbased", "loadbalance_srcid", or "loadbalance_srcmac"

nsx.edge.esg.size

Size of the ESG appliances.

Values: compact, large, quadlarge, xlarge

nsx.edge.description

Description to configure in the edges created by Abiquo.