Support for NAT in VMware Aria Operations for Networks

This site will be decommissioned on January 30th 2025. After that date content will be available at techdocs.broadcom.com.

VMware Aria Operations for Networks supports the VM-VM Path for NSX for vSphere, NSX-T Edges, Fortinet, and Check Point.

VM-VM Path

A sample VM-VM path through NAT is as follows:

Graphical representation of a VM-VM path showing both path topology and VM underlay.

Graphical representation of a VM-VM path through Check Point NAT. — Figure 1. VM-VM path through Check Point NAT

Queries

To view VM-VM path through NAT, use the following queries:

If destination VM is behind a Fortinet and Check Point router, and configured with NAT, then use VMware VM '<name of the VM>' to VMware VM '<name of the VM>' via DNAT query.
If destination VM is behind an NSX for vSphere or NSX-T Edge and configured with NAT, then use VMware VM '<name of the VM>' to VMware VM '<name of the VM>' query.

Considerations

For the VM-VM path with the NSX-T logical routers where the NAT service is enabled, VMware Aria Operations for Networks don't show the NSX-T edge firewall rules correctly for such a path.