You can configure certain vApp networks to provide IP masquerade services. Enable IP masquerading on a vApp network to hide the internal IP addresses of virtual machines from the organization virtual datacenter network.

When you enable IP masquerade, vCloud Director translates a virtual machine's private, internal IP address to a public IP address for outbound traffic.


Verify that a routed vApp network exists.


  1. Click the My Cloud tab and click vApps in the left pane.
  2. Right-click a vApp and select Open.
  3. On the Networking tab, select Show networking details.
  4. Right-click the vApp network and select Configure Services.
  5. Click the NAT tab and select Port Forwarding.
  6. Select Enable IP Masquerade and click OK.
  7. Click Apply.