# NAT Gateway This guide explains the **NAT Gateway** configuration functions as a bridge between a private network and the internet, providing additional security for the private network. This guide will discuss the steps to add NAT Gateway configuration in the Cloudeka portal service. To be able to remotely access virtual machines in the Cloudeka portal service, you must configure a VPC using the Expert type for easy access via a terminal on your computer. The difference between Simple VPC and Expert VPC is the location of the IP addressing used. In the case of a Simple VPC, IP addressing goes directly to the virtual machine, while in the case of an Expert VPC, IP addressing first goes through the NAT Gateway. Besides the location of the IP addressing, the Expert VPC allows users to save floating IPs because there is an additional port configuration that can be used for multiple virtual machines in the same subnet. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.cloudeka.id/deka_flexi/nat-gateway.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.