VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manual de usuario descargar pdf (Pagina 53)

VMware, Inc. 53

Chapter 10 vShield Edge Management

5UnderStaticBindings,clickAddBindings.

Anewrowappearsinthetable.

6Double‐clickeachcellintherowtoenterorselecttheappropriateinformation.

ThePrimaryNameServerandSecondaryNameServ erfieldsrefertoDNSservice.YoumustentertheIP

addressofaDNSserverfor

hostname‐to‐IPaddressresolution.

7ClickCommittosavetherule.

8IfDHCPservicehasnotbeenenabled,enableDHCPservice.

See“StartorStopvShieldEdgeServices”onpage 56.

Manage VPN Service

vShieldEdgemodulessupportsite‐to‐siteIPSecVPNbetweenavShieldEdgeandremotesites.

Figure 10-1. vShield Edge Providing VPN Access from a Remote Site to a Secured Port Group

Atthistime,vShieldEdgesupportspre‐sharedkeymode,IPunicasttraffic,andnodynamicroutingprotocol

betweenthevShieldEdgeandremoteVPNrouters.BehindeachremoteVPNrouter,youcanconfigure

multiplesubnetstoconnecttotheinternalnetworkbehindavShieldEdgethroughIPSectunnels.These

subnetsandtheinternalnetworkbehindavShieldEdgemusthavenon‐overlappingaddressranges.

YoucandeployavShieldEdgeagentbehindaNATdevice.Inthisdeployment,theNATdevicetranslatesthe

VPN

addressofavShieldEdgeintoapubliclyaccessibleaddressfacingtheInternet.RemoteVPNroutersuse

thispublicaddresstoaccessthevShieldEdge.

RemoteVPNrouterscanbelocatedbehindaNATdeviceaswell.YoumustprovideboththeVPNnative

addressandtheNATpublicaddress

tosetupthetunnel.

Onbothends,staticone‐to‐oneNATisrequiredfortheVPNaddress.

1 2 ... 48 49 50 51 52 53 54 55 56 57 58 ... 161 162

Sin comentarios

VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manual de usuario Pagina 53