VMware VSHIELD APP 1.0 - API Instrukcja Użytkownika Pobierz pdf (Strona 56)

vShield API Programming Guide

56 VMware, Inc.

Revert to Default Firewall Configuration

Youcanrevertthefirewallconfigurationforthenodetoitsdefaultbydeletingallrulesthatwerecreatedfor

thespecifiedcontextID,includingdefaultrules.ForadatacenterorIPnamespace,afreshsetofdefaultrules

aresubstituted.

Example 6-5. Delete firewall configuration and revert to default

Example:

DELETE https://<vsm-ip>/api/2.0/app/firewall/<contextID>/config

Working with SpoofGuard

ItispossibleforaguestoperatingsystemtospoofitsIPaddresssothatVMwareToolswouldmisreportitto

vCenterServer.TheSpoofGuardfeatureallowsthedatacenteradministratortocertifyandauthorizereported

IPaddresses,andifnecessary,alterthem.ThisisdonebycheckingtheIPaddressagainst

thevirtualmachine’s

MACaddress,whichcomesfromtheVMXandcannotbespoofed.

TheSpoofGuardfeatureisorthogonaltofirewallrules.SpoofGuardblockstrafficifitthinkstheIPisspoofed,

whetherornotfirewallrulessaytoblock.

Retrieve SpoofGuard Global Settings

YoucanretrieveSpoofGuardsettingssuchasthestatus(disabledorenabled),modeofoperation,timestamp,

andpublishingauthority.

Example 6-6. Get SpoofGuard settings

Example:

GET https://<vsm-ip>/api/2.0/spoofGuard/globalSettings

Edit SpoofGuard Global Settings

YoucanmodifytheSpoofGuardsettings.

Example 6-7. Edit SpoofGuard settings

Example:

POST https://<vsm-ip>/api/2.0/spoofGuard/globalSettings

RequestBody:

<status>enabled</status>

<mode>trustOnFirstUse</mode>

</globalSettings>

</VshieldConfiguration>

Statuscanbeenabledordisabled.ModecanbetrustOnFirstUseormanual.

Retrieve SpoofGuard IP Settings

YoucanretrievealistofSpoofGuardsettings,includedIPaddressessuspectedofbeingforged,thusblocked.

1 2 ... 51 52 53 54 55 56 57 58 59 60 61 ... 103 104

Brak uwag

VMware VSHIELD APP 1.0 - API Instrukcja Użytkownika Strona 56