VMware VSHIELD APP 1.0 - API Manual do Utilizador descarregar pdf (Página 36)

vShield API Programming Guide

36 VMware, Inc.

YoumustspecifythehostIDofthetargetESXhosttoinstallallservices.

See“ESXHostPreparationandUninstallationSchema”onpage 108.

Example 3-1. Install a vShield App and vShield Endpoint on an ESX host

Request

POST https://<vsm-ip>/api/1.0/vshield/<host-id>

RequestBody

<DatastoreId>datastore-5035</DatastoreId>

<ManagementPortSwitchId>network-4485</ManagementPortSwitchId>

</MgmtInterface>

</VszInstallParams>

<InstallAction>install</InstallAction>

</VshieldConfiguration>

ESXhostpreparationrequiresthefollowingelements:

 DatastoreId:VCMOIDofthedatastoreonwhichthevShieldAppservicevirtualmachinefileswillbe

stored.

 ManagementPortSwitchId:VCMOIDoftheportgroupthatwillhostthemanagementportofthe

vShieldApp.

 MgmtInterface

 IpAddress:IPaddresstobeassignedtothemanagementportofthevShieldApp.ThisIPaddress

mustbeabletocommunicatewiththevShieldManager.

 NetworkMask:SubnetmaskassociatedwiththeIPaddressassignedtothemanagementinterfaceof

thevShieldApp.

 DefaultGw:IPaddressofthedefaultgateway.

Afterinstallationofallcomponentsiscomplete,dothefollowing:

 vShieldApp:Atthispoint,vShieldAppinstallationiscomplete.EachvShieldAppinheritsglobal

firewallrulessetinthevShieldManager.Thedefaultfirewallrulesetallowsalltraffictopass.Youmust

configureblockingrulestoexplicitlyblocktraffic.ToconfigureAppFirewallrules,see“Configuring

FirewallRules

forvCenter”onpage 60.

 vShieldEndpoint:Tocompleteinstallation,see“vShieldEndpointManagement”onpage 81.

YoucaninstallasingleservicebyidentifyingonlythatserviceinthePOSTbody.InExample 3‐2,onlyvShield

Appisinstalled,asidentifiedbyinclusionoftheVszInstallParamselementonly.

Example 3-2. Install a vShield App only

Request:

POST https://<vsm-ip>/api/1.0/vshield/<host-id>/vsz

RequestBody:

CAUTIONDonotinstallvShieldApp(orvShieldZones)ontheESXhostwherevCenterServerisrunning,

otherwisevShieldAppcouldinterferewithvSpheremanagementtraffic.

1 2 ... 31 32 33 34 35 36 37 38 39 40 41 ... 131 132

Sem comentários

VMware VSHIELD APP 1.0 - API Manual do Utilizador Página 36