Articles → AWS → NAT Gateway In AWS

NAT Gateway In AWS

In this article, we will discuss the NAT gateway in AWS.

What Is NAT Gateway?

NAT (stands for Network Address Translation) is a service that allows the EC2 instance in the private subnet to connect to the internet.

How To Create NAT Gateway?

To create a NAT Gateway, we will work on the following steps: -

Create a private subnet
Create a new route table
Associate the subnet with the route table
Launch 2 EC2 Linux instances
Enable OpenSSH Authentication Agent service
Log in to the Linux instance using the SSH utility
Ping Google
Create a NAT gateway
Add an entry of NAT gateway in the route table
Ping Google again

So, let us get started.

Create A Private Subnet

First, create a subnet. As the subnet should be private, the property Auto-assign public IPv4 address should be No.

Picture showing the private subnet created in AWS console

Click to Enlarge

Create A New Route Table

The next step is to create a new route table. Please note that there should be no route for an internet gateway.

Picture showing a new route table created in AWS console

Click to Enlarge

Associate The Subnet With The Route Table

The next step is to associate the subnet with the route table.

Picture showing associating the route table with private network

Click to Enlarge

Launch 2 EC2 Linux Instances

Launch 2 EC2 instances, one in private subnet and other in public subnet.

Picture showing the 2 Linux EC2 instances created in AWS console

Click to Enlarge

Enable Openssh Authentication Agent Service

Go to services.msc and change the Start type as Manual.

Picture showing changing the Openssh Authentication Agent Service startup type as Manual

Click to Enlarge

Open command prompt and write the following command: -

ssh-agent.exe

Login To The Linux Instance Using SSH Utility

First, write the following command: -

ssh-add -k karan.pem

In the above command, karan.pem is the private key file name. The purpose of the above command is to add the private key in the SSH authentication agent.

Picture showing the ssh-add command for adding the private key in SSH authentication agent

Click to Enlarge

To connect to the EC2 instance in public subnet, write the following command: -

ssh -A ec2-user@<Public IP address of EC2 instance>

Picture showing connecting the Linux virtual machine using ssh utility

Click to Enlarge

Once the EC2 instance is connected, connect to the other EC2 instance (which was launched in a private subnet). Use the following command: -

ssh ec2-user@<Private IP of EC2 instance>

Picture showing connecting to second EC2 instance using SSH utility

Click to Enlarge

Ping Google

Now, the EC2 instance launched in the private subnet is connected, write the following command to ping Google.

ping google.com

You will not be able to ping as the subnet is in a private subnet and is not connected to the Internet.

Picture showing the error when pinging Google.com

Click to Enlarge

Create A NAT Gateway

To create a NAT gateway, click on the NAT Gateways menu in the VPC dashboard.

Picture showing the NAT Gateways menu in VPC dashboard

Click to Enlarge

A screen will appear on the right-hand side. Click on the Create NAT gateway button.

Picture showing the Create NAT gateway button for adding the new NAT Gateway

Click to Enlarge

In the Create NAT gateway screen, enter the following information: -

Field	Value
Name	Any custom name of NAT gateway
Subnet	Select the Public subnet
Elastic IP allocation ID	Select the elastic IP. If elastic IP does not exists then click on the “Allocate Elastic IP” button to create it

Picture showing the screen to create NAT Gateway

Click to Enlarge

Scroll down to the bottom and click on the Create NAT gateway button. The NAT gateway is created.

Add An Entry Of NAT Gateway In Route Table

Add a route entry of NAT gateway in the private route table.

Picture showing the screen to add network gateway as route in route table

Click to Enlarge

Ping Google Again

Again, ping Google and you can see that this time you can ping Google.

Picture showing the ping to Google successfully

Click to Enlarge

Posted By -	Karan Gupta

Posted On -	Wednesday, July 27, 2022

Query/Feedback

Your Email Id		**

Subject		*

Query/Feedback	Characters remaining 250	**