There is a command group 'az_network_vpn gateway_nat rule'. This group of commands could 'manage site to site vpn gateway nat rule'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_network_vpn gateway_nat rule_create'.The syntax is: az network vpn-gateway nat-rule create --gateway-name
                                       --name
                                       --resource-group
                                       [--external-mappings]
                                       [--internal-mappings]
                                       [--ip-config-id]
                                       [--mode {egresssnat, ingresssnat}]
                                       [--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
                                       [--type {dynamic, static}]. The 1th example of the child command would be to use it to 'create a nat rule', the syntax is: az network vpn-gateway nat-rule create -g MyResourceGroup --gateway-name MyVpnGateway --name MyNatRule --internal-mappings [{"address-space":10.4.0.0/24}] --external-mappings [{"address-space":192.168.21.0/24}] --type Static --mode EgressSnat. The parameter '--gateway-name' is required. It is used to the name of the gateway.. The parameter '--name -n' is required. It is used to the name of the nat rule.. The parameter '--resource-group -g' is required. It is used to name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--external-mappings' is optional. the private ip address external mapping for nat.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--internal-mappings' is optional. the private ip address internal mapping for nat.  support shorthand-syntax, json-file and yaml-file. try "??" to show more.. The parameter '--ip-config-id' is optional. the ip configuration id this nat rule applies to.. The parameter '--mode' is optional. the source nat direction of a vpn nat.. The parameter '--no-wait' is optional. do not wait for the long-running operation to finish.. The parameter '--type' is optional. the type of nat rule for vpn nat.. 