VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Uživatelský manuál stáhnout pdf (Strana 16)

vShield API Programming Guide

16 VMware, Inc.

PortGroupIsolationisaserviceusedbyavShieldEdgetoisolatethevirtualmachinesinavDSportgroup

fromtheexternalnetwork.WhenPortGroupIsolationisenabled,trafficisnotallowedaccesstothevirtual

machinesintheprotectedportgroupunlessNATrulesorVLANtags

areconfigured.

YoumustspecifythehostIDofthetargetESXhosttoinstallallservices.

See“ESXHostPreparationandUninstallationSchema”onpage 68.

Example 3-1. Installing a vShield App, vShield Endpoint, and Port Group Isolation on an ESX Host

Request:

POST <vshield_manager-uri>/api/1.0/vshield/<host-id>

Example:

POST /api/1.0/vshield/host-5450 HTTP/1.1

Content-type: application/xml; charset=UTF-8

Authorization: Basic YWRtaW46ZGVmYXVsdA==

Cache-Control: no-cache

Pragma: no-cache

Host: 10.112.196.244

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive

Content-Length: 489

<VshieldConfiguration><VszInstallParams><DatastoreId>datastore-5035</DatastoreId>

<ManagementPortSwitchId>network-4485</ManagementPortSwitchId><MgmtInterface>

<PortgroupIsolationInstallParams><DatastoreId>datastore-5035</DatastoreId>

</PortgroupIsolationInstallParams><EpsecInstallParams>true</EpsecInstallParams>

<InstallAction>install</InstallAction></VshieldConfiguration>

ESXhostpreparationrequiresthefollowingelements:

 DatastoreId:VCMOIDofthedatastoreonwhichthevShieldAppandPortGroupIsolationservice

virtualmachinefileswillbestored.

 ManagementPortSwitchId:VCMOIDoftheportgroupthatwillhostthemanagementportofthe

vShieldApp.

 MgmtInterface

 IpAddress:IPaddresstobeassignedtothemanagementportofthevShieldApp.ThisIPaddress

mustbeabletocommunicatewiththevShieldManager.

 NetworkMask:SubnetmaskassociatedwiththeIPaddressassignedtothemanagementinterfaceof

thevShieldApp.

 DefaultGw:IPaddressofthedefaultgateway.

CAUTIONDonotinstallvShieldZones/AppontheESXhostwherevCenterServerisrunning.

NOTEPortGroupIsolationisanoptionalfeaturethatisnotrequiredforvShieldEdgeoperation.PortGroup

IsolationisavailableforvDS‐basedvShieldEdgeinstallationsonly.

1 2 ... 11 12 13 14 15 16 17 18 19 20 21 ... 89 90

Žádné komentáře

VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Uživatelský manuál Strana 16