VMware Cloud on Dell

简体中文 繁體中文 English

Add Management Gateway Firewall Rules
Last Updated January 20, 2025

Maintaining the safety and security of your SDDC management infrastructure is critical. By default, the management gateway blocks traffic to all management network destinations from all sources. You must add management gateway firewall rules to allow secure traffic from trusted sources.
  1. Log in to the VMware Cloud Services Console at https://console.cloud.vmware.com/csp/gateway/discovery.
  2. Launch the
    VMware Cloud on Dell
     service.
  3. Click the required SDDC name.
  4. Click
    Network
    Network & Security
    Gateway Firewall
    .
  5. On the
    Gateway Firewall
     card, click
    Management Gateway
  6. To add a rule, click
    ADD RULE
     and give the new rule a
    Name
    .
  7. Enter the parameters for the new rule.
    Parameters are initialized to their default values (for example,
    All
     for
    Sources
     and
    Destinations
    ). To edit a parameter, move the mouse pointer over the parameter value and click the pencil icon () to open a parameter-specific editor.
    • Sources
      : Do the following:
      1. Select
        Any
        to allow traffic from any source address or address range.
        Although you can select Any as the source address in a firewall rule, using Any as the source address in this firewall rule can enable attacks on your
        vCenter Server
         and may lead to compromise of your SDDC. As a best practice, configure this firewall rule to allow access only from trusted source addresses. See VMware Knowledge Base article 84154.
      2. Select
        System Defined Groups
        and select
        vCenter
         to allow traffic from your SDDC's vCenter Server.
    • Destinations
      : Do the following:
      1. Select
        Any
        to allow traffic to any destination address or address range.
      2. Select
        System Defined Groups
        and select
        vCenter
         to allow traffic from your SDDC's vCenter Server.
    The new rule is enabled by default.
  8. 按一下
    發佈
    以建立規則。
    系統會為新規則提供整數
    識別碼
    值，該值將用於規則所產生的記錄項目。
    依序自上而下套用防火牆規則。由於底部的預設
    捨棄
    規則，且上面的規則始終為
    允許
    規則，管理閘道防火牆規則順序對流量沒有影響。

Content feedback and comments