VMware VSHIELD APP 1.0 - API Uživatelský manuál stáhnout pdf (Strana 48)

vShield API Programming Guide

48 VMware, Inc.

Example 5-12. Set firewall policy to allow all

POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge

<defaultPolicy>allow</defaultPolicy>

</firewallConfig>

</vshieldEdgeConfig>

Revert Firewall to Default

Thisreturnsthefirewalltodefaultconfiguration(deny)bydeletingexistingrules.

Example 5-13. Reset firewall to defaults

POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge

</vshieldEdgeConfig>

Create Firewall Rule with IPset or applicationSet

TogettheIDoftheIPsetorapplicationSet,seeExample 2‐28,“ListIPsetsonascope,”onpage 25or

Example 2‐46,“Listapplicationsonagivenscope,”onpage 31.

Iftherefer en cedIPsetorapplicationSetisdeleted,therulewillthedisabledontheEdgeappliance.

Thedefaultpolicyin

effectistodeny.Theexamplebelowsetsittoallowbasedontworules.

Example 5-14. IPset or applicationSet based firewall rule

POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge

<defaultPolicy>allow</defaultPolicy>

<enableLoggingForDefaultPolicy>false</enableLoggingForDefaultPolicy>

<blockIcmpErrors>false</blockIcmpErrors>

<rule>

<networkId>network-12</networkId>

<applicationIdentifier>application-20</applicationIdentifier>

</destinationIpAddress>

<ipsetIdentifier>ipset-2</ipsetIdentifier>

</sourceIpAddress>

<action>allow</action>

<enableLog>false</enableLog>

<disabled>false</disabled>

<comments>Used IpSet</comments>

</rule>

<rule>

<networkId>network-12</networkId>

<icmpType>address-mask-reply</icmpType>

</destinationIpAddress>

</sourceIpAddress>

1 2 ... 43 44 45 46 47 48 49 50 51 52 53 ... 131 132

Žádné komentáře

VMware VSHIELD APP 1.0 - API Uživatelský manuál Strana 48