VMware VMWARE CLOUD DIRECTOR 1.0 - TECHNICAL NOTE Guide de l'utilisateur télécharger pdf (Page 24)

4 Type a range of IP addresses or use the default range.

vCloud Director uses these addresses to satisfy DHCP requests. The range of DHCP IP addresses cannot

overlap with the static IP pool for the organization vDC network.

5 Set the default lease time and maximum lease time or use the default values.

6 Click OK.

vCloud Director updates the network to provide DHCP services.

Configure the Firewall for an Organization vDC Network

An organization administrator can configure certain organization vDC networks to provide firewall services.

Enable the firewall on an organization vDC network to enforce firewall rules on incoming traffic, outgoing

traffic, or both.

When you enable the firewall, you can specify a default firewall action to deny all incoming and outgoing

traffic or to allow all incoming and outgoing traffic. You can also add specific firewall rules to allow or deny

traffic that matches the rules to pass through the firewall. These rules take precedence over the default firewall

action. See “Add a Firewall Rule to an Organization vDC Network,” on page 24.

If a system administrator specified syslog server settings and those settings were applied to the organization

vDC network, then you can log events related to the default firewall action. For information about applying

syslog server settings, see “Apply Syslog Server Settings to an Organization vDC Network,” on page 33. To

view the current syslog server settings see “View Syslog Server Settings for an Organization vDC Network,”

on page 33.

Prerequisites

Verify that a routed organization vDC network is in place.

Procedure

1 Click Administration and select the organization vDC.

2 Click the Org vDC Networks tab, right-click the organization vDC network name, and select Configure

Services.

3 Click the Firewall tab and select Enable firewall to enable firewall services, or deselect it to disable firewall

services.

4 Select the default firewall action.

Option Description

Deny

Blocks all traffic except when overridden by a firewall rule.

Allow

Allows all traffic except when overridden by a firewall rule.

5 (Optional) Select the Log check box to log events related to the default firewall action.

6 Click OK.

Add a Firewall Rule to an Organization vDC Network

An organization administrator can add firewall rules to an organization vDC network that supports a firewall.

You can create rules to allow or deny traffic that matches the rules to pass through the firewall.

When you add a new firewall rule to an organization vDC network, it appears at the bottom of the firewall

rule list. For information about how to set the order in which firewall rules are enforced, see “Reorder Firewall

Rules for an Organization vDC Network,” on page 26.

vCloud Director User's Guide

24 VMware, Inc.

1 2 ... 19 20 21 22 23 24 25 26 27 28 29 ... 125 126

Pas de commentaire

VMware VMWARE CLOUD DIRECTOR 1.0 - TECHNICAL NOTE Guide de l'utilisateur Page 24