Create an NAT Routed vApp Network

To provide a vApp network with DHCP, firewall, NAT, and VPN services, you must create it as an NAT routed vApp network.

Prerequisites

Verify that you are connected to a VMware Cloud Director server.

Retrieve the vApp for which you want to create a vApp network.
```
$myVApp = Get-CIVApp -Name 'MyVApp'
```
Retrieve the organization vDC network to which you want to connect the vApp network.
```
$myOrgVdcNetwork = Get-OrgVdcNetwork -Name 'MyOrgVdcNetwork'
```
Create the new vApp network with a gateway and network mask, defined pool of static IP addresses, and a deactivated firewall.
```
New-CIVAppNetwork -VApp $myVApp -ParentOrgVdcNetwork $myOrgVdcNetwork -Name 'MyVAppInternalNetwork' -Routed -Gateway '192.168.2.1' -Netmask '255.255.255.0' -DisableFirewall -StaticIPPool "192.168.2.100 - 192.168.2.199"
```
If you do not run New-CIVAppNetwork with the DisableFirewall parameter, the new vApp network has an active firewall by default.