VMware VSHIELD APP 1.0 - API Programming Manual page 33

Rules:

You can add multiple DNAT rules by entering multiple <NATRule></NATRule> sections in the body.

For <protocol /> options tcp and udp, you must specify internalPort and externalPort elements.
For options icmp and any, the internalPort and externalPort elements are not expected.

You must add <icmpType /> if you configure icmp as the protocol.

Logging is disabled by default. To enable logging, add a <log /> element within <NATRule />.

The externalIpAddress and internalIpAddress parameters can be entered in either of these formats.
<ipAddress>IpOrAny</ipAddress>
or
<IpRange>
<rangeStart>low_ip_address</rangeStart>
<rangeEnd>high_ip_address</rangeEnd>
</IpRange>

The externalPort and internalPort parameters can be entered in either of these formats.
<port>PortOrAny</port>
or
<PortRange>
<rangeStart>low_port</rangeStart>
<rangeEnd>high_port</rangeEnd>
</PortRange>
Example:

Multiple DNAT Rules
POST /api/1.0/network/network-244/dnat/rules HTTP/1.1
content-type: application/xml; charset=UTF-8
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: 10.112.196.213
accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
content-length: 617
<?xml version="1.0" encoding="UTF-8"

DNAT Rule with IP Range
content-length: 453
<?xml version="1.0" encoding="UTF-8"
VMware, Inc.
standalone="yes"?><VShieldEdgeConfig><NATConfig><NATRule><protocol>tcp</protoc
ol><internalIpAddress><ipAddress>172.16.1.11</ipAddress></internalIpAddress><i
nternalPort><port>any</port></internalPort><externalIpAddress><ipAddress>10.11
2.196.217</ipAddress></externalIpAddress><externalPort><port>any</port></exter
nalPort></NATRule><NATRule><protocol>icmp</protocol><icmpType>any</icmpType><i
nternalIpAddress><ipAddress>172.16.1.11</ipAddress></internalIpAddress><extern
alIpAddress><ipAddress>10.112.196.218</ipAddress></externalIpAddress></NATRule
></NATConfig></VShieldEdgeConfig>
standalone="yes"?><VShieldEdgeConfig><NATConfig><NATRule><protocol>tcp</protoc
ol><internalIpAddress><IpRange><rangeStart>172.17.1.10</rangeStart><rangeEnd>1
72.17.1.15</rangeEnd></IpRange></internalIpAddress><internalPort><port>any</po
rt></internalPort><externalIpAddress><ipAddress>10.112.196.219</ipAddress></ex
ternalIpAddress><externalPort><port>any</port></externalPort></NATRule></NATCo
nfig></VShieldEdgeConfig>
Chapter 5 vShield Edge Management
33