
VMware, Inc. 57
Chapter 6 vShield App Management
Example 6-8. Get SpoofGuard settings
Example:
GET https://<vsm-ip>/api/2.0/spoofGuard/<contextID>?list=<querytype>
where
contextIDcanbethedatacenterIDornetworkIDoftheportGroupwhichhasbeenmarkedas
namespace.
querytypecanbeoneofthese:status,active,inActive,activeSinceLastPublished,requireReview,
duplicates,orunPublished.
Save SpoofGuard IP Settings
YoucansavealistofSpoofGuardsettings.
Example 6-9. Save SpoofGuard settings
Example:
POST https://<vsm-ip>/api/2.0/spoofGuard/<contextID>?action=<todo>
The<todo>actioncouldbeoneof:approve,delete,publish,saveApproved.
AnXMLrepresentationofVnicIdListisexpectedinthemessagebodyfordeleteandapproveactions.Ifthe
actionispublishthennomessagebodyisrequired.IftheactionissaveApprovedthenanXMLrepresentation
ofVnicInfoisexpected.
Working with Namespaces
AvShieldnamespaceisasetofvNICsthatshareacommonIPaddressdomain.Theydonothaveoverlapping
IPaddresses,sotheyarereachableall‐at‐oncebysimpleroutingorswitching.ThereisnoNATbetweenthem.
AnyIPaddressinthenamespacereferstothesamevNIC
regardlessofwhereyoulookatitfromwithinthe
IPaddressdomain.
Adatacenter(asmanagedbyvCenterServer)storesalistofvShieldnamespaces.Thenamespaceitselfcan
specifyanetworknameasanobjectID,oritcancontainalistofIPaddresses.
Add Namespace in a Datacenter
YoucandefineanewvShieldnamespaceinthedatacenterspecifiedby<datacenter-id>.
Example 6-10. Add namespace in a datacenter
Request:
POST https://<vsm-ip>/api/2.0/namespace/datacenter/<datacenter-id>
RequestBody:
<VshieldConfiguration xmlns="vmware.vshield.global.20.namespace">
<namespace type="PORTGROUP" id="0">
<namespacePortGroup>
<Id>network-184</Id>
</namespacePortGroup>
</namespace>
</VshieldConfiguration>
Intherequest,<namespace-id>specifiesthevShieldnamespacename.
Comentarios a estos manuales