
VMware, Inc. 21
Chapter 4 vNetwork Preparation and vShield Edge Installation
Installing a vShield Edge
YoucaninstallonevShieldEdgeperportgroup,vDSportgroup,orCisco
®
Nexus1000V.AvShieldEdge
requiresanexternalportgroupwithaphysicalNICandaninternalportgroupthatcontainsthevirtual
machinestobesecured.ThevShieldEdgesitsinlinebetweentheseportgroups.Ifaninternalportgroupdoes
notexist,youmustcreatethisportgroup
beforeinstallingavShieldEdge.
ThevShieldEdgeinstallationAPIcopiesthevShieldEdgeOVFfromthevShieldManagertothespecified
datastoreanddeploysavShieldEdgeonthegivenportgroup.AfterthevShieldEdgeisinstalled,thevirtual
machinepowersonandinitializesaccordingtothegivennetwork
configuration.
InstallingavShieldEdgeinstanceaddsavirtualmachinetothevCenterServerinventory,whichismirrored
inthevShieldManageruserinterface.YoumustnamethevShieldEdgeinstanceandspecifyanIPaddressfor
themanagementinterface.
Fortheschema,see“vShieldEdgeInstallationandUpgradeSchema”onpage 72.
Example 4-4. Installing a vShield Edge
Request:
POST <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/vshieldedge
<VShieldEdgeConfig>
<InstallParams>
<operationMode>routing</operationMode>
<resourcePoolId>resource_pool_id_from_MOB</resourcePoolId>
<hostId>host_id_from_MOB</hostId>
<dataStoreId>datastore_id_from_MOB</dataStoreId>
<InternalInterface>
<networkId>interface_id_of_internal_interface_from_MOB</networkId>
<networkAddress>ip_address_of_internal_interface</networkAddress>
<subnetMask>subnetmask_for_internal_interface</subnetMask>
</InternalInterface>
<ExternalInterface>
<networkId>interface_id_of_external_interface_from_MOB</networkId>
<networkAddress>ip_address_of_external_interface</networkAddress>
<subnetMask>subnetmask_for_external_interface</subnetMask>
<defaultGw>default_gateway_for_external_interface</defaultGw>
</ExternalInterface>
</InstallParams>
</VShieldEdgeConfig>
Rules:
Theinstallationschemarequiresthefollowingvalues:
operationMode:Enterroutingasthevalue.
resourcePoolId:EntertheVCMOIDoftheresourcepool.
hostId:EntertheVCMOIDoftheESXHosttowhichthevShieldEdgeistobecloned.
dataStoreId:EntertheVCMOIDoftheDatastoretowhichthevShieldEdgeistobecloned.
InternalInterface:EntertheVCMOIDfortheinternalportgroup.
ExternalInterface:EntertheVCMOIDfortheexternalportgroup.
Example:
POST /api/1.0/network/network-244/vshieldedge HTTP/1.1
Content-Type: application/xml
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: localhost:9998
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-Length: 620
Comentarios a estos manuales