vShield Administration Guide
52 VMware, Inc.
To configure a DNAT rule for a vShield Edge
1IntothevSphereClient,gotoInventory>Networking.
2 SelectanInternalportgroupwhereavShieldEdgehasbeeninstalled.
3ClickthevShieldEdgetab.
4ClicktheNATlink.
5UnderDirectionIn(DNAT),clickAdd.
Anewrowappearsinthetable.
6Double‐clickeachcellintherowtoenterorselecttheappropriateinformation.
7ClickCommittosavetherule.
Manage DHCP Service
vShieldEdgesupportsIPaddresspoolingandone‐to‐onestaticIPaddressallocation.StaticIPaddress
bindingisbasedonthevCentermanagedobjectIDandinterfaceIDoftherequestingclient.
vShieldEdgeDHCPserviceadherestothefollowingrules:
ListensonthevShieldEdgeinternalinterfaceforDHCPdiscovery.
UsestheIPaddressoftheinternalinterfaceonthevShieldEdgeasthedefaultgatewayaddressforall
clients,andthebroadcast andsubnetmaskvaluesoftheinternalinterfaceforthecontainernetwork.
To add a DHCP IP pool
1InthevSphereClient,gotoInventory>Networking.
2 Selectaninternalportgroupthatis
protectedbyavShieldEdge.
3ClickthevShieldEdgetab.
4ClicktheDHCPlink.
5UnderIPPools,clickAddPool.
Anewrowappearsinthetable.
6Double‐clickeachcellintherowtoenterorselecttheappropriateinformation.
ThePrimaryNameServerandSecondaryNameServ erfieldsreferto
DNSservice.YoumustentertheIP
addressofaDNSserverforhostname‐to‐IPaddressresolution.
7ClickCommittosavetherule.
8IfDHCPservicehasnotbeenenabled,enableDHCPservice.
See“StartorStopvShieldEdgeServices”onpage 56.
To add a DHCP static binding
1InthevSphereClient,gotoInventory>Networking.
2 SelectaninternalportgroupthatisprotectedbyavShieldEdge.
3ClickthevShieldEdgetab.
4ClicktheDHCPlink.
Commenti su questo manuale