VMware VSHIELD APP 1.0.0 UPDATE 1 - API, Руководство администратора

Страница: 76 / 144

vShield Administration Guide
76 VMware, Inc.
SpoofGuard Screen Options
The SpoofGuard screen displays the following options.
Enable SpoofGuard
You must enable SpoofGuard per datacenter to manage IP address assignments.
To enable SpoofGuard
1 In the vShield Manager user interface, go to the Hosts and Clusters view.
2 Select a datacenter resource from the resource tree.
3 Click the SpoofGuard tab.
4 Click Edit to the right side of the Global Status heading.
5 For IP Assignment Tracking , click Enabled .
6 For Operation Mode , select one of the following:

Automatically Trust IP Assignments on Their First Use : Select this option to trust all IP assignments
upon initial registration with the vShield Manager.

Manually Inspect and Approve All IP Assignments Before Use : Select this option to require manual
approval of all IP addresses. All traffic to and from unapproved IP addresses is blocked.
7 Click Ok .
Approve IP Addresses
If you set SpoofGuard to require manual approval of all IP address assignments, you must approve IP address
assignments to allow traffic from those virtual machines to pass.
To approve an IP address
1 In the vShield Manager user interface, go to the Hosts and Clusters view.
2 Select a datacenter resource from the resource tree.
3 Click the SpoofGuard tab.
4 Click the Require Approval or Duplicate IP assignments link.
Table 13-1. SpoofGuard Screen Options
Option Description
Global Status Status of SpoofGuard as either enabled or disabled
Inactive List of IP addresses where the current IP address does not match the published
IP address.
Active Since Last Published List of IP addresses that have been validated since the policy was last updated
Unpublished IP assignment changes List of virtual machines for which you have edited the IP address assignment
but have not yet published
Require Approval IP address changes that require approval before traffic can flow to or from these
virtual machines
Duplicate IP assignments IP addresses that are duplicates of an existing assigned IP address within the
selected datacenter
I
MPORTANT
You must upgrade all vShield App instances to vShield App 1.0.0 Update 1 or later before you
enable SpoofGuard.