VMware VSHIELD APP 1.0.0 UPDATE 1 Quick Start Manual page 26

vShield Quick Start Guide
Each vShield Edge requires at least one IP address to number the External interface. Multiple external IP
addresses can be configured for Load Balancer, Site-to-Site VPN, and NAT services. The Internal interface can
have a private IP address block that overlaps with other vShield Edge secured port groups.
You can install one vShield Edge per port group, vDS port group, or Cisco
If DRS and HA are enabled, a vShield Edge will be migrated dynamically.
To install a vShield Edge
1 Log in to the vSphere Client.
2 Go to View > Inventory > Networking.
3 On a vDS, create a port group.
This port group is the Internal port group.
4 Move a tenant's guest virtual machines to the Internal port group.
5 Select the new Internal port group.
6 Click the Edge tab.
7 Under Network Interfaces, enter the following information.
Field
External
Port Group
IP Address
Subnet Mask
Default Gateway
Internal
Port Group
IP Address
Subnet Mask
8 (Optional) Select the Isolate check box to enable Port Group Isolation on the vShield Edge.
This prevents virtual machines on the Internal port group from communicating with systems outside of
that port group.
9 Under Edge deployment resource selection, enter the following information
Field
Resource Pool
Host
Datastore
10 Click Install.
After installation is complete, configure services and firewall rules to protect the virtual machines in the
secured port group. To configure a vShield Edge, see the vShield Administration Guide.
26
Action
Select the external port group in the vDS. This port group homes a physical
NIC and connects to the external network.
Type the IP address of the external port group.
Type the IP subnet mask associated with the specified external IP address.
Type the IP address of the default network gateway.
This is the selected internal port group.
Type the IP address of the internal port group.
Type the IP subnet mask associated with the specified internal IP address.
Action
Select the resource pool where the vShield Edge should be deployed.
Select the ESX host on which the datastore resides.
Select the datastore on which to store the vShield Edge virtual machine files.
®
Nexus 1000V.
VMware, Inc.