vShield Administration Guide
To configure an SNAT rule for a vShield Edge
1
In to the vSphere Client, go to Inventory > Networking.
2
Select an Internal port group where a vShield Edge has been installed.
3
Click the vShield Edge tab.
4
Click the NAT link.
5
Under Direction OUT (SNAT), click Add Rule.
A new row appears in the table.
6
Double‐click each cell in the row to enter the appropriate information.
7
Click Commit to save the rule.
To configure a DNAT rule for a vShield Edge
1
In to the vSphere Client, go to Inventory > Networking.
2
Select an Internal port group where a vShield Edge has been installed.
3
Click the vShield Edge tab.
4
Click the NAT link.
5
Under Direction In (DNAT), click Add Rule.
A new row appears in the table.
6
Double‐click each cell in the row to enter or select the appropriate information.
7
Click Commit to save the rule.
Manage DHCP Service
vShield Edge supports IP address pooling and one‐to‐one static IP address allocation. Static IP address
binding is based on the vCenter managed object ID and interface ID of the requesting client.
vShield Edge DHCP service adheres to the following rules:
Listens on the vShield Edge internal interface for DHCP discovery.
Uses the IP address of the internal interface on the vShield Edge as the default gateway address for all
clients, and the broadcast and subnet mask values of the internal interface for the container network.
To add a DHCP IP pool
1
In the vSphere Client, go to Inventory > Networking.
2
Select an internal port group that is protected by a vShield Edge.
3
Click the vShield Edge tab.
4
Click the DHCP link.
5
Under IP Pools, click Add Pool.
A new row appears in the table.
6
Double‐click each cell in the row to enter or select the appropriate information.
The Primary Name Server and Secondary Name Server fields refer to DNS service. You must enter the IP
address of a DNS server for hostname‐to‐IP address resolution.
The Domain Name and Lease Time fields are optional. The default lease time is one day.
54
VMware, Inc.
Need help?
Do you have a question about the VSHIELD APP 1.0 and is the answer not in the manual?