VMware Workstation 7 Uživatelský manuál Strana 402

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 512
  • Tabulka s obsahem
  • ŘEŠENÍ PROBLÉMŮ
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků
Zobrazit stránku 401
Workstation User’s Manual
402 VMware, Inc.
Setting Network Access Policies
Thenetworkaccessfeatureusesapacketfilteringfirewalltoenableyoutospecify
whichmachinesorsubnetsanACEinstanceoritshostsystemmayaccess.Thismeans
thatyoucan,forexample,configuretheinstancesothatitisallowedtoconnectonlyto
yourVPNserver,whichthencontrolsaccesstoot
herresources.
Youcanalsocustomizethenetworkaccesssettingstofilteronthebasisofnetwork
addresses,trafficdirection,protocol,andports.Youcansetthefollowingtypesof
networkaccessrestrictiondefinitions:
Networkzones
NetworkaccessforanACEinstance’shostmachine(alsoknownas“hostnetwork
access”)
NetworkaccessforanACEinstance’sguestoperatingsystem(alsoknownas
“guestnetworkaccess”)
NetworkaccesspoliciescanbedynamiciftheACEinstanceisassociatedwithanACE
ManagementServer.ThismeansthatafteryoupublishapolicyupdatetoACE
ManagementServer,ACEinstancesgetthenewpolicythenextti
metheycheckfor
policyupdates.YoucanquicklylockACEinstancesoutofallorpartofyournetwork
tohelpcombatthespreadofawormorviruswithoutdeployingupdatepackages.See
theVMware ACEManagementServerAdministrator’sGuide.
Before You Begin Setting Host Policies
Usethefollowingguidelinesasyouplannetworkaccesspolicies:
AhostmachineforACEinstancescanhaveonlyonehostpolicyfile.Ifyoutryto
installanACEpackagewithahostpolicyfileonamachinethatalreadyhasa
differenthostpolicyfile,installationofthenewpackagefails.
AhostpolicyisineffectevenwhennoACEinstancesarerunning.Thepolicystarts
immediatelyafterinstallationandstartsworkingeverytimethehostsystemboots.
Anyrestrictionsonthehost’snetworkaccessalsorestrictnetworkaccessforan
ACEinstancethatusesNATnetworking,becausetheNATconnectionisaffected
byallthepoliciesyouapplytothehost.Ifyousetuprestrictedhostaccessbyusing
theACEruleseteditorandruleseditorratherthantheNetw
orkAccesswizard,
configuretheACEenabledvirtualmachine’svirtualNICstousebridged
networking.
IfyouaresettingupamanagedACEenabledvirtualmachine,youmustallowthe
hosttoaccessACEManagementServer,communicatingthroughTCPoverthe
appropriateportthatyouconfigure.
Zobrazit stránku 401
1 2 ... 397 398 399 400 401 402 403 404 405 406 407 ... 511 512

Komentáře k této Příručce

Žádné komentáře