VMware CLOUD DIRECTOR 1.0 Admin Manual page 56

Cloud Director Administrator's Guide
Add a Firewall Rule for an Organization Network
You can add firewall rules to an organization network that supports a firewall to allow traffic that matches the
rules to pass through the firewall.
In order for a firewall rule to be enforced, you must enable the firewall for the organization network. See
"Enable the Firewall for an Organization Network,"
Both system administrators and organization administrators can add firewall rules.
Prerequisites
An external NAT-routed organization network.
Procedure
1 Click the Manage & Monitor tab and click Organization Networks in the left pane.
2 Right-click the organization network name and select Configure Services.
3 Click the Firewall tab and click Add.
4 Type a name for the rule.
5 Type the IP address of the virtual machine for which you want to allow incoming traffic.
6 Select the port for incoming traffic.
7 Select the protocol of the incoming traffic to accept.
8 Select the Enable check box and click OK.
Enable IP Masquerading for an Organization Network
You can configure certain organization networks to provide IP masquerade services. Enable IP masquerading
on an organization network to hide the internal IP addresses of virtual machines from the external network.
When you enable IP masquerade, Cloud Director translates a virtual machine's private, internal IP address
into a public IP address for outbound traffic.
Both system administrators and organization administrators can enable IP masquerade.
Prerequisites
An external NAT-routed organization network.
Procedure
1 Click the Manage & Monitor tab and click Organization Networks in the left pane.
2 Right-click the organization network name and select Configure Services.
3 Click the NAT - External IP Mapping tab and select Enable IP Masquerade.
Add External IP Addresses to an Organization Network
Before you can configure external IP mapping for an organization network, you must add one or more external
IP addresses.
Only a system administrator can add external IP addresses to an organization network.
Prerequisites
An external NAT-routed organization network.
56
on page 55.
VMware, Inc.