Table of Contents
Advertisement
Multiple tunnels and sites for an IPSEC server
POST /api/1.0/network/network-244/vpn/ipsec/config HTTP/1.1
Content-Type: application/xml
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: localhost:9998
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-Length: 1295
<?xml version="1.0" encoding="UTF-8"
Add a Remote Site
You can add a remote VPN site to connect remote users to the virtual machines protected by a vShield Edge.
Example 5-35. Adding a Remote VPN Site
Request:
POST <vshield_manager-uri>/api/1.0/network/<portgroup-moid>/vpn/ipsec/sites
Example
POST /api/1.0/network/network-244/vpn/ipsec/sites
Content-Type: application/xml
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: localhost:9998
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-Length: 576
<?xml version="1.0" encoding="UTF-8"
VMware, Inc.
standalone="yes"?><VShieldEdgeConfig><VPNConfig><IpsecVPNConfig><SiteToSiteIpsec><
VPNServerConfig><externalIpAddress>10.112.196.99</externalIpAddress><natedPublicIp
Address>10.112.196.199</natedPublicIpAddress></VPNServerConfig><VPNSite><Configura
tion><siteName>VSE2</siteName><remoteEndPointexternalIpAddress>10.112.196.218</rem
oteEndPointexternalIpAddress><sharedSecret>psk2</sharedSecret><mtu>1500</mtu></Con
figuration><VPNTunnel><Configuration><tunnelName>tunnelVSE1</tunnelName><remoteSit
eSubnet>172.19.1.0/24</remoteSiteSubnet><encryptionAlgorithm>3des</encryptionAlgor
ithm></Configuration></VPNTunnel><VPNTunnel><Configuration><tunnelName>tunnelVSE2<
/tunnelName><remoteSiteSubnet>172.20.1.0/24</remoteSiteSubnet><encryptionAlgorithm
>aes</encryptionAlgorithm></Configuration></VPNTunnel></VPNSite><VPNSite><Configur
ation><siteName>VSE1</siteName><remoteEndPointexternalIpAddress>10.112.196.219</re
moteEndPointexternalIpAddress><sharedSecret>psk1</sharedSecret><mtu>1500</mtu></Co
nfiguration><VPNTunnel><Configuration><tunnelName>tunnelVSE</tunnelName><remoteSit
eSubnet>172.17.1.0/24</remoteSiteSubnet><encryptionAlgorithm>aes</encryptionAlgori
thm></Configuration></VPNTunnel></VPNSite></SiteToSiteIpsec></IpsecVPNConfig></VPN
Config></VShieldEdgeConfig>
standalone="yes"?><VShieldEdgeConfig><VPNConfig><IpsecVPNConfig><SiteToSiteIpsec><
VPNSite><Configuration><siteName>VSE2</siteName><remoteEndPointexternalIpAddress>1
0.112.196.218</remoteEndPointexternalIpAddress><sharedSecret>psk2</sharedSecret><m
tu>1500</mtu></Configuration><VPNTunnel><Configuration><tunnelName>tunnelVSE1</tun
nelName><remoteSiteSubnet>172.19.1.0/24</remoteSiteSubnet><encryptionAlgorithm>3de
s</encryptionAlgorithm></Configuration></VPNTunnel></VPNSite></SiteToSiteIpsec></I
psecVPNConfig></VPNConfig></VShieldEdgeConfig>
Chapter 5 vShield Edge Management
41
Advertisement
Table of Contents
