
vShield API Programming Guide
38 VMware, Inc.
Get the Status of VPN Service
YoucandetermineiftheVPNserviceonavShieldEdgeisrunningorstoppedbyrequestingtheservicestatus.
Example 5-34. Getting the Status of VPN Service
Request:
GET <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/vpn/ipsec/service
Example:
GET /api/1.0/network/network-244/vpn/ipsec/service HTTP/1.1
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: localhost:9998
Start or Stop the VPN Service on a vShield Edge
YouenableordisableVPNserviceonavShieldEdgebyupdatingthestatustostartorstop.
Example 5-35. Starting or Stopping VPN Service on a vShield Edge
Request:
PUT <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/
vpn/ipsec/action/{start | stop}
Example:
PUT /api/1.0/network/network-244/vpn/ipsec/action/start HTTP/1.1
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: localhost:9998
PUT /api/1.0/network/network-244/vpn/ipsec/action/stop HTTP/1.1
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: locahost
Configure VPN Parameters on a vShield Edge
YoucanprovideconfigurationparametersonavShieldEdgeagenttosetaVPNtunneltoaremoteVPN
router.ThefirsttimeyouconfigureVPNserviceforavShieldEdge,theconfigurationmustcontaintheserver
configurationandaminimumofoneremotesitewithatunnel.Iftheseelements
arenotsent,theconfiguration
isrejected.
TheIPSecparametersmustbecompatibleonallIPSecendpoints.
Example 5-36. Configuring VPN Parameters
Request:
POST <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/vpn/ipsec/config
Rules:
Loggingisdisabledbydefault.Toenablelogging,adda<log />elementwithin<VPNServerConfig />.
VPNservicerequiresencryption.Youmustspecifythe<encryptionAlgorithm />elementaseither
3desoraes.
ThenatedPublicIpAddresselementunderVPNServerConfigisoptional.
ThesiteNameandtunnelNamecancontainonlyalphanumericcharacters.
Komentarze do niniejszej Instrukcji