az network vpn-gateway nat-rule
Note
This reference is part of the virtual-wan extension for the Azure CLI (version 2.55.0 or higher). The extension will automatically install the first time you run an az network vpn-gateway nat-rule command. Learn more about extensions.
Manage site-to-site VPN gateway nat rule.
Commands
Name | Description | Type | Status |
---|---|---|---|
az network vpn-gateway nat-rule create |
Create a nat rule to a scalable vpn gateway if it doesn't exist else updates the existing nat rules. |
Extension | GA |
az network vpn-gateway nat-rule delete |
Delete a nat rule. |
Extension | GA |
az network vpn-gateway nat-rule list |
List all nat rules for a particular virtual wan vpn gateway. |
Extension | GA |
az network vpn-gateway nat-rule show |
Get the details of a nat ruleGet. |
Extension | GA |
az network vpn-gateway nat-rule update |
Update a nat rule to a scalable vpn gateway if it doesn't exist else updates the existing nat rules. |
Extension | GA |
az network vpn-gateway nat-rule wait |
Place the CLI in a waiting state until a condition is met. |
Extension | GA |
az network vpn-gateway nat-rule create
Create a nat rule to a scalable vpn gateway if it doesn't exist else updates the existing nat rules.
az network vpn-gateway nat-rule create --gateway-name
--name
--resource-group
[--external-mappings]
[--internal-mappings]
[--ip-config-id]
[--mode {EgressSnat, IngressSnat}]
[--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
[--type {Dynamic, Static}]
Examples
Create a nat rule.
az network vpn-gateway nat-rule create -g MyResourceGroup --gateway-name MyVpnGateway --name MyNatRule --internal-mappings [{"address-space":10.4.0.0/24}] --external-mappings [{"address-space":192.168.21.0/24}] --type Static --mode EgressSnat
Required Parameters
The name of the gateway.
The name of the nat rule.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Optional Parameters
The private IP address external mapping for NAT. Support shorthand-syntax, json-file and yaml-file. Try "??" to show more.
The private IP address internal mapping for NAT. Support shorthand-syntax, json-file and yaml-file. Try "??" to show more.
The IP Configuration ID this NAT rule applies to.
The Source NAT direction of a VPN NAT.
Do not wait for the long-running operation to finish.
The type of NAT rule for VPN NAT.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
az network vpn-gateway nat-rule delete
Delete a nat rule.
az network vpn-gateway nat-rule delete [--gateway-name]
[--ids]
[--name]
[--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
[--resource-group]
[--subscription]
[--yes]
Examples
Delete a nat rule.
az network vpn-gateway nat-rule delete -g MyResourceGroup --gateway-name MyVpnGateway --name MyNatRule -y
Optional Parameters
The name of the gateway.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
The name of the nat rule.
Do not wait for the long-running operation to finish.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Do not prompt for confirmation.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
az network vpn-gateway nat-rule list
List all nat rules for a particular virtual wan vpn gateway.
az network vpn-gateway nat-rule list --gateway-name
--resource-group
[--max-items]
[--next-token]
Examples
List all nat rules.
az network vpn-gateway nat-rule list -g MyResourceGroup --gateway-name MyVpnGateway
Required Parameters
The name of the gateway.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Optional Parameters
Total number of items to return in the command's output. If the total number of items available is more than the value specified, a token is provided in the command's output. To resume pagination, provide the token value in --next-token
argument of a subsequent command.
Token to specify where to start paginating. This is the token value from a previously truncated response.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
az network vpn-gateway nat-rule show
Get the details of a nat ruleGet.
az network vpn-gateway nat-rule show [--gateway-name]
[--ids]
[--name]
[--resource-group]
[--subscription]
Examples
Get the details of a nat rule.
az network vpn-gateway nat-rule show -g MyResourceGroup --gateway-name MyVpnGateway --name MyNatRule
Optional Parameters
The name of the gateway.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
The name of the nat rule.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
az network vpn-gateway nat-rule update
Update a nat rule to a scalable vpn gateway if it doesn't exist else updates the existing nat rules.
az network vpn-gateway nat-rule update [--add]
[--external-mappings]
[--force-string {0, 1, f, false, n, no, t, true, y, yes}]
[--gateway-name]
[--ids]
[--internal-mappings]
[--ip-config-id]
[--mode {EgressSnat, IngressSnat}]
[--name]
[--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
[--remove]
[--resource-group]
[--set]
[--subscription]
[--type {Dynamic, Static}]
Examples
Update a nat rule.
az network vpn-gateway nat-rule update -g MyResourceGroup --gateway-name MyVpnGateway --name MyNatRule --internal-mappings [{"address-space":10.3.0.0/24}]
Optional Parameters
Add an object to a list of objects by specifying a path and key value pairs. Example: --add property.listProperty <key=value, string or JSON string>
.
The private IP address external mapping for NAT. Support shorthand-syntax, json-file and yaml-file. Try "??" to show more.
When using 'set' or 'add', preserve string literals instead of attempting to convert to JSON.
The name of the gateway.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
The private IP address internal mapping for NAT. Support shorthand-syntax, json-file and yaml-file. Try "??" to show more.
The IP Configuration ID this NAT rule applies to.
The Source NAT direction of a VPN NAT.
The name of the nat rule.
Do not wait for the long-running operation to finish.
Remove a property or an element from a list. Example: --remove property.list <indexToRemove>
OR --remove propertyToRemove
.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Update an object by specifying a property path and value to set. Example: --set property1.property2=<value>
.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
The type of NAT rule for VPN NAT.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
az network vpn-gateway nat-rule wait
Place the CLI in a waiting state until a condition is met.
az network vpn-gateway nat-rule wait [--created]
[--custom]
[--deleted]
[--exists]
[--gateway-name]
[--ids]
[--interval]
[--name]
[--resource-group]
[--subscription]
[--timeout]
[--updated]
Optional Parameters
Wait until created with 'provisioningState' at 'Succeeded'.
Wait until the condition satisfies a custom JMESPath query. E.g. provisioningState!='InProgress', instanceView.statuses[?code=='PowerState/running'].
Wait until deleted.
Wait until the resource exists.
The name of the gateway.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
Polling interval in seconds.
The name of the nat rule.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Maximum wait in seconds.
Wait until updated with provisioningState at 'Succeeded'.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.