VMware VSHIELD APP 1.0 - API Manuale Utente Scaricare il pdf (Pagina 50)

vShield API Programming Guide

50 VMware, Inc.

Example 5-18. Configure NAT service

POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge

<rule>

<enableLog>false</enableLog>

</rule>

<rule>

</rule>

</natConfig>

</vshieldEdgeConfig>

Forthedatapathtowork,youneedtochangethedefaultfirewallpolicytoALLOW,orpunchFirewallrules

toallowdatatrafficonexternalandinternalinterfaces.

Rules:

 For<protocol>optionstcpandudp,youmustspecifysourcePortanddestinationPortelements.

Foroptionsicmpandany,thesourcePortanddestinationPortelementsarenotexpected

 Youmustadd<icmpType>ifyouconfigureicmpastheprotocol.

 TheexternalIpAddressandinternalIpAddresselementscanbeenteredineitherofthesemethods:

 <ipAddress>specifiedasasingleIPaddress,ahyphen‐separatedIPaddressrange(forexample,

192.168.10.1-192.168.10.2555) orasubnetinCIDRnotation(198.168.10.1/24).

 thekeywordany

 TheexternalPortandinternalPortparameterscanbeenteredinoneofthefollowingformats:the

keywordany,theportnumberasaninteger,orarangeofportnumber,forexampleportX-portY.

 YoucanaddmultipleSNATrulesbyenteringmultiple<type>snat</type>sectionsinthebody.

 SNATdoesnotsupportportorprotocolparameters.

 Loggingisdisabledbydefault.Toenablelogging,addan<enableLog>elementsettotrue.

Delete NAT Configuration

TodeleteNATconfiguration,postanemptyruleset.

Example 5-19. Delete NAT rules

POST https://<vsm-ip>/api/2.0/networks/<internal-portgroup-vc-moref-id>/edge

</vshieldEdgeConfig>

1 2 ... 45 46 47 48 49 50 51 52 53 54 55 ... 131 132

Nessun commento

VMware VSHIELD APP 1.0 - API Manuale Utente Pagina 50