VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manual do Utilizador descarregar pdf (Página 17)

VMware, Inc. 17

Chapter 3 ESX Host Preparation for vShield App, Endpoint, and Isolation

Afterinstallationofallcomponentsiscomplete,dothefollowing:

 vShieldApp:Atthispoint,vShieldAppinstallationiscomplete.EachvShieldAppinheritsglobal

firewallrulessetinthevShieldManager.Thedefaultfirewallrulesetallowsalltraffictopass.Youmust

configureblockingrulestoexplicitlyblocktraffic.ToconfigureAppFirewallrules,see“Configuring

FirewallRules

foravCenterContainer”onpage 51.

 PortGroupIsolation:YoumustenablethePortGroupIsolationfeatureoneachvDS.Afterenablement

iscomplete,installavShieldEdgeoneachportgroup.See“vNetworkPreparationandvShieldEdge

Installation”onpage 19.

 vShieldEndpoint:Tocompleteinstallation,see“vShieldEndpointManagement”onpage 61.

YoucaninstallasingleservicebyidentifyingonlythatserviceinthePOSTbody.InExample 3‐2,onlyvShield

Appisinstalled,asidentifiedbyinclusionoftheVszInstallParamselementonly.

Example 3-2. Installing a vShield App Only

Request:

POST <vshield_manager-uri>/api/1.0/vshield/<host-id>/vsz

Example:

POST /api/1.0/vshield/host-5126 HTTP/1.1

Content-type: application/xml; charset=UTF-8

Authorization: Basic YWRtaW46ZGVmYXVsdA==

Cache-Control: no-cache

Pragma: no-cache

Host: 10.112.196.244

Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2

Connection: keep-alive

Content-Length: 368

<VshieldConfiguration><VszInstallParams><DatastoreId>datastore-5131</DatastoreId>

<ManagementPortSwitchId>network-5134</ManagementPortSwitchId><MgmtInterface>

<InstallAction>install</InstallAction></VshieldConfiguration>

Get the Installation Status of vShield Services on an ESX Host

YoucanretrievetheinstallationoruninstallationstatusofvShieldservicesonanESXhosttotrackprogressas

completeornotinitiated.Ifneitheroftheseoperationsisinprogress,theresponseincludesthelistofinstalled

servicesontheESXhost.

Example 3-3. Getting vShield Service Installation Status on an ESX Host

Request:

GET <vshield_manager-uri>/api/1.0/vshield/<host-id>

CAUTIONDonotinstallvShieldZones/AppontheESXhostwherevCenterServerisrunning.

1 2 ... 12 13 14 15 16 17 18 19 20 21 22 ... 89 90

Sem comentários

VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manual do Utilizador Página 17