VMware VSHIELD APP 1.0 - API Manuale Utente Pagina 70

  • Scaricare
  • Aggiungi ai miei manuali
  • Stampa
  • Pagina
    / 132
  • Indice
  • SEGNALIBRI
  • Valutato. / 5. Basato su recensioni clienti
Vedere la pagina 69
vShield API Programming Guide
70 VMware, Inc.
<action>allow</action>
<logged>false</logged>
<notes></notes>
<destination/>
</layer2FirewallRule>
</firewallConfiguration>
</VshieldAppConfiguration>
Change Firewall Configuration
ToconfigurevShieldAppfirew allrules,
1Querythefirewallrulesforthecontextyouwanttoconfigure.Thecontextcanbeadatacenter,cluster,or
portgroup.
2ExtracttheXMLfromtheresponsebodyinstep1andmakethedesiredchangestoit.
3Extractthevalueofthegenerationnumberfrom
theEtagheaderoftheresponseinStep1,andadditas
theifmatchheaderinthePOSTcall.
Forexample,thegenerationnumberintheGETresponseforthefirewallconfigurationofadatacenteris
1312802020950(fromExample 64).Youmustnowspecifythefollowingheaderinthe
RequestBodyofa
POSTcommandforchangingthedatacenterfirewallconfiguration:
If-Match: "1312802020950"
4PassthemodifiedXMLfromstep2astheRequestBodyinaPOSTcall.
IMPORTANTYoumustspecifythecompleteconfigurationforacontextinthePOSTcall.
Revert to Default Firewall Configuration
Youcanrevertthefirewallconfigurationforthenodetoitsdefaultbydeletingallrulesthatwerecreatedfor
thespecifiedcontextID,includingdefaultrules.ForadatacenterorIPnamespace,afreshsetofdefaultrules
aresubstituted.
Example 6-10. Delete firewall configuration and revert to default
Example:
DELETE https://<vsm-ip>/api/2.0/app/firewall/<contextID>/config
Configuring Fail-Safe Mode for vShield App Firewall
Bydefault,failureorunavailabilityofthevShieldAppapplianceresultsintrafficbeingblocked(failclose).
Youcanchangethistoallowtraffic(failopen).
Configure Fail-Safe Mode for vShield App Firewall
Example 6-11. Configure fail-safe mode
Example:
PUT https://<vsm-ip>/api/2.1/app/failsafemode
Request Body
<VshieldAppConfiguration>
<failsafeConfiguration>
<failsafemode>FAIL_OPEN</failsafemode>
</failsafeConfiguration>
Vedere la pagina 69
1 2 ... 65 66 67 68 69 70 71 72 73 74 75 ... 131 132

Commenti su questo manuale

Nessun commento