A system includes circuitry configured to receive a request to diagnose a first virtual machine coupled to a first network, the first virtual machine being identified in the first network based on a first address and identified in a second network based on a second address; transmit, to a to a router coupled between the first network and the second network, a request that an association be made between a third address and the first address based on the first request; and diagnose the first virtual machine via the router based on the third address, the third address being translated into the first address by the router based on the association.