Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Apply NAT Rules

 

After installing CSO, you must apply NAT rules.

To review the details of the ports, see Ports to Open on CSO VMs.

  1. Run ./get_vm_details.sh script to find the IP addresses of each component.
    root@startupserver_1:~/Contrail_Service_Orchestration_5.1.2# ./get_vm_details.sh
  2. Configure next hop at the gateway for VRR public IP addresses (for example—10.x.x.3 and 10.x.x.4) to point to the SRX IP address (for example—10.x.x.2).
    • Apply the following NAT configuration for any public-facing device:

      NAT configuration

    • The following configuration is applicable only if you have as SRX Series device as your firewall. Apply similar rules if you have a third-party firewall.

      Sample SRX config