
vShield API Programming Guide
40 VMware, Inc.
<?xml version="1.0" encoding="UTF-8"
standalone="yes"?><VShieldEdgeConfig><VPNConfig><IpsecVPNConfig><SiteToSiteIpsec>
<VPNSite><Configuration><siteName>VSE2</siteName><remoteEndPointexternalIpAddress>
10.112.196.218</remoteEndPointexternalIpAddress><sharedSecret>psk2</sharedSecret>
<mtu>1500</mtu></Configuration><VPNTunnel><Configuration><tunnelName>tunnelVSE1
</tunnelName><remoteSiteSubnet>172.19.1.0/24</remoteSiteSubnet>
<encryptionAlgorithm>3des</encryptionAlgorithm></Configuration></VPNTunnel>
</VPNSite></SiteToSiteIpsec></IpsecVPNConfig></VPNConfig></VShieldEdgeConfig>
Add Tunnels for a VPN Site
ThiscalladdstunnelstothespecifiedVPNsite.
Example 5-38. Adding Tunnels for a VPN Site
Request:
POST <vshield_manager-uri>/api/1.0/network/<internal-portgroup-vc-moref-id>/
vpn/ipsec/<site-name>/connections
Example
Wheretheremotesitenameisvsesite1.
POST /api/1.0/network/network-244/vpn/ipsec/vsesite1/connections
Content-Type: application/xml
Authorization: Basic YWRtaW46ZGVmYXVsdA==
Host: localhost:9998
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Content-Length: 391
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<VShieldEdgeConfig><VPNConfig><IpsecVPNConfig><SiteToSiteIpsec><VPNSite>
<VPNTunnel><Configuration><tunnelName>tunnelVSE1</tunnelName><remoteSiteSubnet>
172.19.1.0/24</remoteSiteSubnet><encryptionAlgorithm>3des</encryptionAlgorithm>
</Configuration></VPNTunnel></VPNSite></SiteToSiteIpsec></IpsecVPNConfig>
</VPNConfig></VShieldEdgeConfig>
Get the Detailed IPSec Configurations for a Network
YoucanretrieveadetailedVPNconfigurationforanetworkthatcontainstheVPNserverconfigurations,site
configurations,tunnelconfigurations,andthedetailedconfigurationofalltunnelsinallsites.
Example 5-39. Getting the Detailed VPN Configuration for a Network
Request:
GET <vshield_manager-uri>/api/1.0/network/<vdc-moref-id>/vpn/ipsec/detailedconfig
Example:
GET /api/1.0/network/dvportgroup-1004/vpn/ipsec/detailedconfig HTTP/1.1
Host: localhost:9998
authorization: Basic YWRtaW46ZGVmYXVsdA==
Kommentare zu diesen Handbüchern