VMware VSHIELD APP 1.0.0 UPDATE 1 - API Programming Manual page 16

vShield API Programming Guide
Port Group Isolation is a service used by a vShield Edge to isolate the virtual machines in a vDS port group
from the external network. When Port Group Isolation is enabled, traffic is not allowed access to the virtual
machines in the protected port group unless NAT rules or VLAN tags are configured.
N Port Group Isolation is an optional feature that is not required for vShield Edge operation. Port Group
OTE
Isolation is available for vDS-based vShield Edge installations only.
You must specify the host ID of the target ESX host to install all services.
See "ESX Host Preparation and Uninstallation Schema"
Example 3-1. Installing a vShield App, vShield Endpoint, and Port Group Isolation on an ESX Host
Request:
POST <vshield_manager-uri>/api/1.0/vshield/<host-id>
Example:
POST /api/1.0/vshield/host-5450 HTTP/1.1
Content-type: application/xml; charset=UTF-8
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Cache-Control: no-cache
Pragma: no-cache
Host: 10.112.196.244
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: keep-alive
Content-Length: 489
<VshieldConfiguration><VszInstallParams><DatastoreId>datastore-5035</DatastoreId>
ESX host preparation requires the following elements:

DatastoreId: VC MOID of the datastore on which the vShield App and Port Group Isolation service
virtual machine files will be stored.

ManagementPortSwitchId: VC MOID of the port group that will host the management port of the
vShield App.

MgmtInterface

IpAddress: IP address to be assigned to the management port of the vShield App. This IP address
must be able to communicate with the vShield Manager.

NetworkMask: Subnet mask associated with the IP address assigned to the management interface of
the vShield App.

DefaultGw: IP address of the default gateway.
16
<ManagementPortSwitchId>network-4485</ManagementPortSwitchId><MgmtInterface>
<IpAddress>10.112.196.245</IpAddress><NetworkMask>255.255.252.0</NetworkMask>
<DefaultGw>10.112.199.253</DefaultGw></MgmtInterface></VszInstallParams>
<PortgroupIsolationInstallParams><DatastoreId>datastore-5035</DatastoreId>
</PortgroupIsolationInstallParams><EpsecInstallParams>true</EpsecInstallParams>
<InstallAction>install</InstallAction></VshieldConfiguration>
on page 68.
VMware, Inc.