I can not create a NAT rule in the network with a NVGRE gateway to the incoming port above 49152
SC VMM 2012 R2 UR2
Windows Server 2012 R2 HA Gateway

I can not create a NAT rule in the network with a NVGRE gateway to the incoming port above 49150
If incoming port is 1-49151:

Add-SCNATRule -Name "RDP" -Protocol "TCP" -InternalIPAddress "192.168.1.2" -ExternalPort 49100 -NATConnection $natConnection -InternalPort 3389

Name              : RDP
ExternalIPAddress : 31.148.222.41
ExternalPort      : 49100
InternalIPAddress : 192.168.1.2
InternalPort      : 3389
Protocol          : TCP
NATConnection     : Network01_NatConnection
ServerConnection  : Microsoft.SystemCenter.VirtualMachineManager.Remoting.ServerConnection
ID                : 7769137b-8b4f-4350-abaf-32f36b0935ed
IsViewOnly        : False
ObjectType        : NATRule
MarkedForDeletion : False
IsFullyCached     : True


If incoming port in range 49152-65535 create nat rule failed.

Add-SCNATRule -Name "RDP" -Protocol "TCP" -InternalIPAddress "192.168.1.2" -ExternalPort 49160 -NATConnection $natConnection -InternalPort 3389

Add-SCNATRule : Execution of Microsoft.SystemCenter.NetworkService::NewNATRule on the configuration provider 4ee559f1-f479-480c-9458-d14b8b1c1779 faile

d. Detailed exception: Microsoft.VirtualManager.Utils.CarmineException: Unable to add or remove NAT rule to the Remote Access server. (FAILED) 
Fix the issue in Remote Access server and retry the operation. (Error ID: 21426)

Check the documentation for the configuration provider or contact the publisher support.

To restart the job, run the following command:
PS> Restart-Job -Job (Get-VMMServer vmmha01 | Get-Job | where { $_.ID -eq "{08433d0a-d9d1-4436-b962-0640fade1473}"})
At line:1 char:1
+ Add-SCNATRule -Name "RDP" -Protocol "TCP" -InternalIPAddress "192.168.1.2" -Exte ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ReadError: (:) [Add-SCNATRule], CarmineException
    + FullyQualifiedErrorId : 21426,Microsoft.SystemCenter.VirtualMachineManager.Cmdlets.AddSCNATRuleCmdlet




May 8th, 2014 8:15pm

Hi

Please take a look of the release notes for UR2 of System Center 2012 R2 Virtual machine manager:

http://support.microsoft.com/kb/2932926

Network address translation (NAT) uses port number 49152 or a larger number, which Windows prohibits from being used by NAT.

Free Windows Admin Tool Kit Click here and download it now
May 8th, 2014 10:01pm

Hi

Sorry for digging out this quite old thread. But I have found some more Information about this behavior. The UR2 alone does not resolve the error. You have to create also a (undocumented) registry key. After that you can open ports above 49151 for NAT.

Have a look at my blog:
http://www.jofe.ch/open-high-ports-over-49151-on-a-windows-server-gateway/

Does anyone know more about this registry key?

Thx

J0F3


  • Edited by J0fe 1 hour 24 minutes ago
February 2nd, 2015 5:13am

Hi

Sorry for digging out this quite old thread. But I have found some more Information about this behavior. The UR2 alone does not resolve the error. You have to create also a (undocumented) registry key. After that you can open ports above 49151 for NAT.

Have a look at my blog:
http://www.jofe.ch/open-high-ports-over-49151-on-a-windows-server-gateway/

Does anyone know more about this registry key?

Thx

J0F3


  • Edited by J0fe Monday, February 02, 2015 10:12 AM
Free Windows Admin Tool Kit Click here and download it now
February 2nd, 2015 1:11pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics