VCAP6-NV Deploy - Objective 6.3 - Configure and Manage Universal Logical Security Objects

Published on 20 November 2017 by Christopher Lewis. Words: 711. Reading Time: 4 mins.

Objective 6.3 - Configure and Manage Universal Logical Security Objects

Objective Overview

• Configure Universal MAC Sets
• Configure Universal IP Sets
• Configure Universal Security Groups
• Configure Universal Services and Service Groups
• Configure Universal Firewall Rules

Objective Prerequisites

The following prerequisites are assumed for this Objective:

• A working VMware vSphere 6.x environment with 2 vCenter Servers and 2 Platform Services linked in ELM.
• A working VMware NSX 6.x environment configured for cross-vCenter NSX.

Objective Breakdown

1. Using your favourite web browser, navigate to the vCenter Server login page (https://vcenter.fqdn).

2. Enter appropriate User name and Password and click Login.

3. Click Networking and Security.

4. Click NSX Managers.

5. Click the Primary NSX manager IP address.

6. Click Manage.

7. Click Grouping Objects.

Configure Universal MAC sets

1. Click MAC Sets.

2. Click Add(+).

3. Enter the Name of the new Universal MAC Set, (optional) Description and enter a list of** MAC Addresses**.

4. Check the Mark this object for Universal Synchronization checkbox.

5. Click OK.

Configure Universal IP Sets

1. Click IP Sets.

2. Click Add (+).

3. Enter the Name of the new Universal IP Set, (optional) Description and enter a range of IP Addresses.

4. Check the Mark this object for Universal Synchronization checkbox.

5. Click OK.

Configure Universal Services

1. Click Service.

2. Click Add(+).

3. Enter the Name of the new Universal Service, (optional) Description, and select a Protocol from the dropdown.

4. Check the Mark this object for Universal Synchronization checkbox.

5. Click OK.

Configure Universal Service Groups

1. Click Service Groups.

2. Click Add (+).

3. Enter the Name of the new Service Group., (optionally) add a Description and check the Mark this object for Universal Synchronization checkbox.

4. Select the appropriate Service or Service Group from the Object Type dropdown and then select the appropriate item(s) from the Available Objects list and click the arrow to move it to the Selected Objects list.

5. Click OK.

Configure Universal Security Groups

1. Click Security Groups.

2. Click Add (+).

3. Enter the Name of the Security Group, check the Mark this object for Universal Synchronisation and (optionally) check the Use for active standby deployments.

4. Click Next.

5. Define Membership Criteria as required and (optionally) add additional criteria using Add (+).

6. Select IP Sets, Security Tag, MAC Sets or Security Group from the Object Type dropdown.

7. Select the desired object from the Available Objects list and click the arrow to move it to the Select Objects list.

8. Click Next.

9. Click Finish.

Configure Universal Firewall Rules

1. Using your favourite web browser, navigate to the vCenter Server login page (https://vcenter.fqdn).

2. Enter appropriate User name and Password and click Login.

3. Click Networking and Security.

4. Click Firewall.

5. Click New Section.

6. Enter a Name for the New Section and check the Mark this section for Universal Synchronization checkbox.

7. Click Save.

8. Click Publish Changes.

9. Under the new Universal Section, click Add Rule.

Update the Firewall Rule Name

1. Highlight the new Universal Firewall Rule and click Edit Name.

2. Enter the new Rule Name and click Save.

Update the Firewall Rule Source

1. Under Source, click Edit.

2. Select a Universal object from the Object Type dropdown, highlight an item from the Available Objects list and click the arrow to move the item to the Selected Objects list.

3. Click OK.

Update the Firewall Rule Destination

1. Under Destination, click Edit.

2. Select a Universal object from the Object Type dropdown, highlight an item from the Available Objects list and click the arrow to move the item to the Selected Objects list.

3. Click OK.

Update the Firewall Rule Service

1. Under Service, click Edit.

2. Select a Universal object from the Object Type dropdown, highlight an item from the Available Objects list and click the arrow to move the item to the Selected Objects list.

3. Click OK.

(Optional) Update the Firewall Rule Action

1. Under Action, click Edit.

2. Make changes to the required Action and click Save.

(Optional) Update the Firewall Rule Filter (Applied To)

1. Under Applied To, click Edit.

2. Select a Universal object from the Object Type dropdown, highlight an item from the Available Objects list and click the arrow to move the item to the Selected Objects list.

3. Click OK.

Publish the Firewall Rule

1. Click Publish Changes.

Published on 20 November 2017 by Christopher Lewis. Words: 711. Reading Time: 4 mins.

Share this article on: