Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Go to Virtual datacentersNetworkFirewalls

    1. For GCP go to Global → Network → Firewalls

  2. Click the Add button

  3. Enter the firewall details

    1. In GCP, if you assign a firewall to a Virtual datacenter, you can then use it as a default firewall

    2. In VCD, if you do not select a Virtual datacenter, the platform will create the firewall in the platform only, not in the provider

      Image RemovedImage Added
  4. Click Save to create the firewall

  5. Add Firewall rules as describe in Create firewall rules.

...

Edit firewall policy rules

You can define firewall rules for inbound and outbound traffic in your firewall policy.

To add a new firewall rule:

  1. Select the virtual datacenter or location

  2. Select the firewall

  3. On the Firewall rules panel, click the pencil Edit button

  4. Select the Inbound or Outbound tab for the traffic direction you wish to control

  5. Enter the details of a rule

    1. Protocol

      • Select from Common protocols, OR

      • Select and enter a Custom protocol

    2. Port range with the Start port and End port that this rule will apply to.
      To enter one port, enter the same value twice, or optionally apply the rule to a number of ports at the same time. 
      For Azure and GCP, you can enter:

      1. a single port, such as 80

      2. a range, such as 1024-65535

      3. a list of port/range, such as 80,1024-65535

    3. Sources or Targets as a network address and netmask, or a comma separated list of these (with no spaces)

  6. Click Add. The firewall rule will be added to the Firewall rules list

  7. Enter more rules as required, then click Save

...

Info

Before you edit firewall rules in AWS, synchronize the firewall to update the rules because AWS will not allow you to create a rule that already exists in the security group. Remember that it may take some time for firewall rules to propagate throughout AWS. Until the rules have propagated, the platform will not be able to detect them. See http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/query-api-troubleshooting.html#eventual-consistency

See Edit firewall rules

...

Create a firewall policy in GCP

...