Operation Guide

1. Log in to the CFW console. In the left sidebar, choose Firewall Toggle > NAT Firewall Toggle to go to the NAT Firewall Toggle page.
2. On the NAT Firewall Toggle page, click Firewall Instance to go to the firewall instance page. Existing instances are displayed as cards in a list. If there is no firewall instance, you can click Create Instance to add instances.

• The current version only supports a single region.
• The list of available VPCs displays the information of all VPCs under the current account, and you can select multiple VPCs. If the selected VPCs have been connected to other instances, they will be displayed as grayed and cannot be selected.

3. You can perform other auxiliary operations.

• Synchronize Assets: On the Network Topology and Firewall Instance tabs under the Inter-VPC Toggles page, click Synchronize Assets to call the backend API promptly to read and synchronize the asset information of the current user again. This can avoid a situation where the user's asset scale is changed within the polling interval of the backend but has not been synchronized.
• Update Engines: Under the Network Topology or Firewall Instance tab, click Update Engines to immediately update the backend engine. After the update is completed, the Update Engines button becomes gray.

4. On the Firewall Instance tab, click Configure Instance.
5. In the Connect VPC and Public Network IP pop-up window on the right side, click Add Access VPC or Reselect VPC to adjust the VPCs connected to the current firewall instance.
6. On the Port Forwarding tab, create or edit port forwarding rules.
7. On the Egress Binding tab, create or edit egress binding rules.

Network Topology Diagram

CFW provides a visual view to help you quickly organize the access relationship between the VPC and the Internet. The network topology diagram illustrates the access relationship between the Internet and the VPC. Traffic between NATs with the toggle enabled will be routed to the firewall for filtering and protection.

1. Log in to the CFW console. In the left sidebar, choose Firewall Toggle > NAT Firewall Toggle to go to the NAT Firewall Toggle page.
2. On the NAT Firewall Toggle page, click Network Topology to go to the Network Topology page.
3. Hover the mouse pointer over a VPC node to view its brief information. You can click a VPC node to view its corresponding information.

Description of Abnormal Scenarios for NAT Firewall

• When you configure a firewall instance, at least one EIP needs to be bound. When there is only one bound EIP left, the unbind button is displayed as gray and unclickable.
• When the firewall toggle is disabled, the system will automatically restore the routing policies of all route tables associated with subnets and the port forwarding rules corresponding to subnets. The traffic of all subnets will be recovered to their original paths and will not pass through NAT Firewall.