VMware VSHIELD APP 1.0.0 UPDATE 1 - API, Руководство администратора

Страница: 52 / 144

vShield Administration Guide
52 VMware, Inc.
To configure a DNAT rule for a vShield Edge
1 In to the vSphere Client, go to Inventory > Networking .
2 Select an Internal port group where a vShield Edge has been installed.
3 Click the vShield Edge tab.
4 Click the NAT link.
5 Under Direction In (DNAT), click Add .
A new row appears in the table.
6 Double-click each cell in the row to enter or select the appropriate information.
7 Click Commit to save the rule.
Manage DHCP Service
vShield Edge supports IP address pooling and one-to-one static IP address allocation. Static IP address
binding is based on the vCenter managed object ID and interface ID of the requesting client.
vShield Edge DHCP service adheres to the following rules:

Listens on the vShield Edge internal interface for DHCP discovery.

Uses the IP address of the internal interface on the vShield Edge as the default gateway address for all
clients, and the broadcast
and subnet mask values of the internal interface for the container network.
To add a DHCP IP pool
1 In the vSphere Client, go to Inventory > Networking .
2 Select an internal port group that is protected by a vShield Edge.
3 Click the vShield Edge tab.
4 Click the DHCP link.
5 Under IP Pools, click Add Pool .
A new row appears in the table.
6 Double-click each cell in the row to enter or select the appropriate information.
The Primary Name Server and Secondary Name Server fields refer to DNS service. You must enter the IP
address of a DNS server for hostname-to-IP address resolution.
7 Click Commit to save the rule.
8 If DHCP service has not been enabled, enable DHCP service.
See “Start or Stop vShield Edge Services” on page 56.
To add a DHCP static binding
1 In the vSphere Client, go to Inventory > Networking .
2 Select an internal port group that is protected by a vShield Edge.
3 Click the vShield Edge tab.
4 Click the DHCP link.