VMware VSHIELD APP 1.0 - API Manuel d'utilisateur Page 41
- Page / 104
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
VMware, Inc. 41
Chapter 5 vShield Edge Management
Example 5-11. Configure firewall
POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge
<vshieldEdgeConfig xmlns="vmware.vshield.edge.2.0">
<firewallConfig>
<defaultPolicy>deny</defaultPolicy>
<enableLoggingForDefaultPolicy>false</enableLoggingForDefaultPolicy>
<blockIcmpErrors>false</blockIcmpErrors>
<rule>
<networkId>network-12</networkId>
<protocol>icmp</protocol>
<icmpType>address-mask-reply</icmpType>
<destinationIpAddress>
<ipAddress>10.112.2.150</ipAddress>
</destinationIpAddress>
<sourceIpAddress>
<ipAddress>any</ipAddress>
</sourceIpAddress>
<direction>out</direction>
<action>deny</action>
<enableLog>true</enableLog>
<disabled>false</disabled>
</rule>
</firewallConfig>
</vshieldEdgeConfig>
Afterthisfirewallconfiguration,theadministratorcandefinefirewallrulesoninternalorexternal(usingthe
dvPo rtgroup’smanagedobjectID),oronthevpnInterfaceoftheEdge.RulescanbedefinedusingIPSetand
ApplicationsGroupingObjectsdefinedontheappropriatescope.Notes:
Youcanaddmultiplefirewallrulesbyenteringmultiple<rule></rule>sectionsinthebody.
ThevpnInterfaceistheexternalpublicaddressoftheVPN.
For<protocol>optionstcpandudp,youmustspecifysourcePortanddestinationPortelements.
Foroptionsicmpandany,thesourcePortanddestinationPortelementsarenotexpected.Other
protocoloptionsincludeigmp,ipencap,rsvp,gre,l2tp,sctp,andipv6.Alsoyouhavetheflexibility
toprovidea
newprotocolNameiftheprotocolisnotlistedbynameinthe<protocol>tag.
Youmustadd<icmpType>ifyouconfigureicmpastheprotocol.
Loggingisdisabledbydefault.Toenableit,add<enableLog>trueelementwithinthe<rule>section.
ThesourceIpAddressanddestinationIpAddresscanbeenteredinoneoftheseformats:
<ipAddress>specifiedasasingleIPaddress,ahyphen‐separatedIPaddressrange(forexample,
192.168.10.1-192.168.10.2555) orasubnetinCIDRnotation(198.168.10.1/24)
thekeywordany
an<ipSetIdentifier>,themanagedobjectIDofanIPset
ThesourcePortanddestinationPortparameterscanbeenteredinoneofthefollowingformats:the
keywordany,theportnumberasaninteger,orarangeofportnumber,forexampleportX-portY.
AnapplicationIdentifierfromGroupingObjectscanreplacethedestinationportandprotocol.
ThedisabledparametermeanstoremembertheruleonvShieldManagerbutnotpushtheruleontothe
Edgeappliance.Thisisoptionalanddefaultstofalse(pushtoappliance).
TheblockIcmpErrorsparameterisadvancedconfiguration.Itisoptionalanddefaultstofalse.
Change Firewall Rule to Allow
Thisdeletespreviouslyconfiguredfirewallrulesandsetsallowasthedefaultpolicy.
- EN-000608-00 1
- 2 VMware, Inc 2
- Contents 3
- 5 vShieldEdgeManagement 37 4
- 6 vShieldAppManagement 53 5
- Appendix 77 6
- About This Book 7
- Support Offerings 8
- VMware Professional Services 8
- Overview of VMware vShield 9
- 10 VMware, Inc 10
- Multitenancy 11
- How REST Works 12
- Using the vShield REST API 12
- About the REST API 13
- RESTful Workflow Patterns 13
- 14 VMware, Inc 14
- VMware, Inc. 15 15
- Retrieving Tech Support Logs 16
- User Management 17
- Update a Local User Account 18
- Remove a User Account 18
- Role Management 19
- Get a List of Possible Roles 20
- Get a List of Scoping Objects 20
- Create an IPset on a Scope 20
- Get Details of an IPset 21
- Modify an Existing IPset 21
- Delete an IPset 21
- Create a MACset on a Scope 22
- Get Details of a MACset 22
- Modify an Existing MACset 22
- Delete a MACset 23
- Get Members for a Scope 24
- Get Security Group Details 24
- Modify a Security Group 24
- Delete a Security Group 25
- Add Member to Security Group 25
- List Applications on a Scope 25
- Add Application to a Scope 26
- Get Details of an Application 26
- Modify Application Details 27
- Delete Application from Scope 27
- 28 VMware, Inc 28
- Endpoint 29
- 30 VMware, Inc 30
- VMware, Inc. 31 31
- 32 VMware, Inc 32
- Installing a vShield Edge 33
- 34 VMware, Inc 34
- VMware, Inc. 35 35
- Uninstalling a vShield Edge 36
- Configuring vShield Edge 37
- Switch to New API Version 38
- Configuring Edge Services 39
- Configure Firewall 40
- Change Firewall Rule to Allow 41
- Revert Firewall to Default 42
- Configure Static Routing 43
- Configure NAT 43
- Delete NAT Configuration 44
- Configure Load Balancer 45
- Miscellaneous 46
- Configure VPN 47
- Manage VPN Service 48
- Delete the VPN Configuration 48
- VMware, Inc. 49 49
- Operating vShield Edge 50
- Debugging and Support 51
- Get Service Statistics 52
- Retrieve Datacenter State 53
- Modify Datacenter State 54
- VMware, Inc. 55 55
- Working with SpoofGuard 56
- Working with Namespaces 57
- Get Namespace Details 58
- Delete a Namespace 58
- Upgrading vShield App 59
- 60 VMware, Inc 60
- Register a Vendor 61
- Register a Solution 62
- Activate a Solution 63
- Get Vendor Registration 64
- Get Solution Registration 64
- Get IP Address of a Solution 64
- Unregister a Vendor 64
- Status Codes and Error Schema 65
- Error Schema 66
- VMware, Inc. 67 67
- Retrieve All Regulations 68
- Enable a Regulation 68
- VMware, Inc. 69 69
- Configure File Filters 70
- Retrieve the Saved SDD Policy 71
- Request: 72
- Data Security Scanning 73
- Analyzing Results 74
- VMware, Inc. 75 75
- 76 VMware, Inc 76
- 78 VMware, Inc 78
- VMware, Inc. 79 79
- 80 VMware, Inc 80
- VMware, Inc. 81 81
- 82 VMware, Inc 82
- VMware, Inc. 83 83
- 84 VMware, Inc 84
- VMware, Inc. 85 85
- 86 VMware, Inc 86
- VMware, Inc. 87 87
- 88 VMware, Inc 88
- VMware, Inc. 89 89
- 90 VMware, Inc 90
- VMware, Inc. 91 91
- 92 VMware, Inc 92
- VMware, Inc. 93 93
- 94 VMware, Inc 94
- VMware, Inc. 95 95
- 96 VMware, Inc 96
- VMware, Inc. 97 97
- 98 VMware, Inc 98
- VMware, Inc. 99 99
- Error Message Schema 100
- VMware, Inc. 101 101
- Appendix 101
- 102 VMware, Inc 102
- VMware, Inc. 103 103
- 104 VMware, Inc 104
Produits connexes et manuels pour Mise en réseau VMware VSHIELD APP 1.0 - API
(23 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.030 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels