VMware VSHIELD APP 1.0 - API Manuel d'utilisateur Page 43

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer
  • Page
    / 104
  • Table des matières
  • MARQUE LIVRES
  • Noté. / 5. Basé sur avis des utilisateurs
Vue de la page 42
VMware, Inc. 43
Chapter 5 vShield Edge Management
<disabled>false</disabled>
</rule>
</firewallConfig>
</vshieldEdgeConfig>
Delete Firewall Configuration
Example 5-15. Delete firewall rules
POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge
<vshieldEdgeConfig xmlns="vmware.vshield.edge.2.0">
<firewallConfig/>
</vshieldEdgeConfig>
Afterremovingafirewallconfiguration,thedefaultpolicythatwillbeineffectisDeny.
Configure Static Routing
Thisusesthenexthopmethodfortheoutgoinginterface.AttributenetworkIdspecifiesthemanagedobject
IDofthenetwork,attributenetworkdesignatestheIPaddressrange,andnextHopthestaticroute.
Example 5-16. Configure static route
POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge
<vshieldEdgeConfig xmlns="vmware.vshield.edge.2.0">
<routeConfig>
<staticRoute>
<networkId>network-12</networkId>
<network>192.168.30.0/24</network>
<nextHop>192.168.10.253</nextHop>
</staticRoute>
</routeConfig>
</vshieldEdgeConfig>
Forthedatapathtowork,youneedtochangethedefaultfirewallpolicytoALLOW,orpunchFirewallrules
toallowdatatrafficonexternalandinternalinterfaces.
Delete the Static Routing
Example 5-17. Delete static route
POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge
<vshieldEdgeConfig xmlns="vmware.vshield.edge.2.0">
<routeConfig>
<staticRoute/>
</routeConfig>
</vshieldEdgeConfig>
Configure NAT
ThevShieldEdgeprovidesnetworkaddresstranslation(NAT)servicetoprotecttheIPaddressesofinternal
(private)networksfromthepublicnetwork.YoucanconfigureNATrulestoprovideaccesstoservicesrunning
onprivatelyaddressedvirtualmachines.TherearetwotypesofNATrulesthatcanbeconfigured:SNATand
DNAT.WhenyoupostaNATconfiguration,alltherules(bothSNATandDNAT)mustbepostedtogether.
Otherwise,onlythepostedrulesareretained,andunpostedrulesaredeleted.
AllSNATand DNATrulesconfiguredbyusingRESTrequests appearunderthevShieldEdge>NATtabfor
theappropriate
vShieldEdgeinthevShieldMa na geruserinterfaceandin thevSphereClient plugin.
FortheNATschema,see“vShieldEdgeSchemas”onpage 88.SampleXMLrequestbody:
Vue de la page 42
1 2 ... 38 39 40 41 42 43 44 45 46 47 48 ... 103 104

Commentaires sur ces manuels

Pas de commentaire