VMware VMWARE CLOUD DIRECTOR 1.0 - TECHNICAL NOTE Guía de usuario descargar pdf (Pagina 74)

Configure the Firewall for a vApp Network

You can configure certain vApp networks to provide firewall services. Enable the firewall on a vApp network

to enforce firewall rules on incoming traffic, outgoing traffic, or both.

When you enable the firewall, you can specify a default firewall action to deny all incoming and outgoing

traffic or to allow all incoming and outgoing traffic. You can also add specific firewall rules to allow or deny

traffic that matches the rules to pass through the firewall. These rules take precedence over the default firewall

action. See “Add a Firewall Rule to a vApp Network,” on page 74.

If a system administrator specified syslog server settings and those settings have been applied to the vApp

network, then you can log events related to the default firewall action. For information about applying syslog

server settings, see “Apply Syslog Server Settings to a vApp Network,” on page 82. To view the current syslog

server settings see “View Syslog Server Settings for a vApp Network,” on page 81.

Prerequisites

A routed vApp network.

Procedure

1 Click the My Cloud tab and click vApps in the left pane.

2 Right-click a vApp and select Open.

3 On the Networking tab, select Show networking details.

4 Right-click the vApp network and select Configure Services.

5 Click the Firewall tab and select Enable firewall to enable firewall services or deselect it to disable firewall

services.

6 Select the default firewall action.

Option Description

Deny

Blocks all traffic except when overridden by a firewall rule.

Allow

Allows all traffic except when overridden by a firewall rule.

7 (Optional) Select the Log check box to log events related to the default firewall action.

8 Click OK.

9 Click Apply.

Add a Firewall Rule to a vApp Network

You can add firewall rules to a vApp network that supports a firewall. You can create rules to allow or deny

traffic that matches the rules to pass through the firewall.

For a firewall rule to be enforced, you must enable the firewall for the vApp network. See “Configure the

Firewall for a vApp Network,” on page 74.

When you add a new firewall rule to a vApp network, it appears at the end of the firewall rule list. For

information about setting the order in which firewall rules are enforced, see “Reorder Firewall Rules for a

vApp Network,” on page 76.

If a system administrator specified syslog server settings and those settings were applied to the vApp network,

then you can log firewall rule events. For information about applying syslog server settings, see “Apply Syslog

Server Settings to a vApp Network,” on page 82. To view the current syslog server settings, see “View Syslog

Server Settings for a vApp Network,” on page 81.

vCloud Director User's Guide

74 VMware, Inc.

1 2 ... 69 70 71 72 73 74 75 76 77 78 79 ... 125 126

Sin comentarios

VMware VMWARE CLOUD DIRECTOR 1.0 - TECHNICAL NOTE Guía de usuario Pagina 74