VMware VSHIELD APP 1.0.0 UPDATE 1 - API Programming Manual page 53

Example 6-3. Posting a Firewall Rule Set at the Datacenter Level with Destination IP as a VLAN Container
Example:
POST /api/1.0/zones/datacenter-7/firewall/rules
content-type: application/xml; charset=UTF-8
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: 192.168.102.134
content-length: 655
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
VMware, Inc.
ANY</DestinationPorts><Protocol>UDP</Protocol><Action>ALLOW</Action><Log>false
</Log><Notes></Notes></Rule><Rule><ID>1005</ID><Precedence>Default</Precedence>
<Position>1</Position><Source ref="ANY" exclude="false"/><Destination ref="ANY"
exclude="false"/><SourcePorts>ANY</SourcePorts><Application type="UNICAST">
ANY</Application><DestinationPorts>ANY</DestinationPorts><Protocol>ARP</Protocol>
<Action>ALLOW</Action><Log>false</Log><Notes></Notes></Rule><Rule><ID>1006</ID>
<Precedence>Default</Precedence><Position>2</Position><Source ref="ANY"
exclude="false"/><Destination ref="ANY" exclude="false"/><SourcePorts>ANY
</SourcePorts><Application type="UNICAST">ANY</Application>
<DestinationPorts>ANY</DestinationPorts><Protocol>OTHER IPv4</Protocol><Action>
ALLOW</Action><Log>false</Log><Notes></Notes></Rule><Rule><ID>1007</ID>
<Precedence>Default</Precedence><Position>3</Position><Source ref="ANY"
exclude="false"/><Destination ref="ANY" exclude="false"/><SourcePorts>ANY
</SourcePorts><Application type="UNICAST">ANY</Application>
<DestinationPorts>ANY</DestinationPorts><Protocol>OTHER LAYER 3</Protocol><Action>
ALLOW</Action><Log>false</Log><Notes></Notes></Rule></RuleSet>
</vshieldZonesFirewallConfiguration>
<vshieldZonesFirewallConfiguration><ContainerAssociation><Container id="No Vlan
(0)"><Name>No Vlan (0)</Name></Container><Container id="vShield"><InstanceId>
datacenter-7</InstanceId></Container><Container id="ANY"><Name>ANY</Name>
</Container></ContainerAssociation><RuleSet><Rule><ID>0</ID><Precedence>High
</Precedence><Position>1</Position><Source ref="vShield" exclude="true"/>
<Destination ref="No Vlan (0)" exclude="false"/><SourcePorts>ANY
</SourcePorts><Application type="UNICAST">MS-RPC</Application>
<DestinationPorts>135</DestinationPorts><Protocol>TCP</Protocol><Action>DENY
</Action><Log>false</Log><Notes></Notes></Rule><Rule><ID>1001</ID><Precedence>
Default</Precedence><Position>1</Position><Source ref="ANY" exclude="false"/>
<Destination ref="ANY" exclude="false"/><SourcePorts>68</SourcePorts>
<Application type="UNICAST">DHCP-Server</Application><DestinationPorts>67
</DestinationPorts><Protocol>UDP</Protocol><Action>ALLOW</Action><Log>false</Log>
<Notes></Notes></Rule><Rule><ID>1002</ID><Precedence>Default</Precedence>
<Position>2</Position><Source ref="ANY" exclude="false"/><Destination ref="ANY"
exclude="false"/><SourcePorts>67</SourcePorts><Application type="UNICAST">
DHCP-Client</Application><DestinationPorts>68</DestinationPorts><Protocol>UDP
</Protocol><Action>ALLOW</Action><Log>false</Log><Notes></Notes></Rule><Rule><ID>
1003</ID><Precedence>Default</Precedence><Position>3</Position><Source ref="ANY"
exclude="false"/><Destination ref="ANY" exclude="false"/><SourcePorts>ANY
</SourcePorts><Application type="UNICAST">ANY</Application><DestinationPorts>
ANY</DestinationPorts><Protocol>TCP</Protocol><Action>ALLOW</Action><Log>false
</Log><Notes></Notes></Rule><Rule><ID>1004</ID><Precedence>Default</Precedence>
<Position>4</Position><Source ref="ANY" exclude="false"/><Destination ref="ANY"
exclude="false"/><SourcePorts>ANY</SourcePorts><Application type="UNICAST">
ANY</Application><DestinationPorts>ANY</DestinationPorts><Protocol>UDP</Protocol>
<Action>ALLOW</Action><Log>false</Log><Notes></Notes></Rule><Rule><ID>1005</ID>
<Precedence>Default</Precedence><Position>1</Position><Source ref="ANY"
exclude="false"/><Destination ref="ANY" exclude="false"/><SourcePorts>ANY
</SourcePorts><Application type="UNICAST">ANY</Application>
<DestinationPorts>ANY</DestinationPorts><Protocol>ARP</Protocol><Action>ALLOW
</Action><Log>false</Log><Notes></Notes></Rule><Rule><ID>1006</ID><Precedence>
Default</Precedence><Position>2</Position><Source ref="ANY" exclude="false"/>
<Destination ref="ANY" exclude="false"/><SourcePorts>ANY</SourcePorts>
<Application type="UNICAST">ANY</Application><DestinationPorts>ANY
</DestinationPorts><Protocol>OTHER IPv4</Protocol><Action>ALLOW</Action><Log>false
</Log><Notes></Notes></Rule><Rule><ID>1007</ID><Precedence>Default</Precedence>
<Position>3</Position><Source ref="ANY" exclude="false"/><Destination ref="ANY"
Chapter 6 vShield App Management
53