thecloudxpert

VCAP6-NV Deploy - Objective 6.3 - Configure and Manage Universal Logical Security Objects

VMware NSX-V VCAP6-NV VCIX6-NV HOWTO

Published on 20 November 2017 by Christopher Lewis. Words: 711. Reading Time: 4 mins.

Objective 6.3 - Configure and Manage Universal Logical Security Objects

Objective Overview

  • Configure Universal MAC Sets
  • Configure Universal IP Sets
  • Configure Universal Security Groups
  • Configure Universal Services and Service Groups
  • Configure Universal Firewall Rules

Objective Prerequisites

The following prerequisites are assumed for this Objective:

  • A working VMware vSphere 6.x environment with 2 vCenter Servers and 2 Platform Services linked in ELM.
  • A working VMware NSX 6.x environment configured for cross-vCenter NSX.

Objective Breakdown


  1. Using your favourite web browser, navigate to the vCenter Server login page (https://vcenter.fqdn).
  1. Enter appropriate User name and Password and click Login.
  1. Click Networking and Security.
  1. Click NSX Managers.
  1. Click the Primary NSX manager IP address.
  1. Click Manage.
  1. Click Grouping Objects.

Configure Universal MAC sets

  1. Click MAC Sets.
  1. Click Add(+).
  1. Enter the Name of the new Universal MAC Set, (optional) Description and enter a list of** MAC Addresses**.
  1. Check the Mark this object for Universal Synchronization checkbox.
  1. Click OK.

Configure Universal IP Sets

  1. Click IP Sets.
  1. Click Add (+).
  1. Enter the Name of the new Universal IP Set, (optional) Description and enter a range of IP Addresses.
  1. Check the Mark this object for Universal Synchronization checkbox.
  1. Click OK.

Configure Universal Services

  1. Click Service.
  1. Click Add(+).
  1. Enter the Name of the new Universal Service, (optional) Description, and select a Protocol from the dropdown.

  1. Check the Mark this object for Universal Synchronization checkbox.
  1. Click OK.

Configure Universal Service Groups

  1. Click Service Groups.
  1. Click Add (+).
  1. Enter the Name of the new Service Group., (optionally) add a Description and check the Mark this object for Universal Synchronization checkbox.
  1. Select the appropriate Service or Service Group from the Object Type dropdown and then select the appropriate item(s) from the Available Objects list and click the arrow to move it to the Selected Objects list.
  1. Click OK.

Configure Universal Security Groups

  1. Click Security Groups.
  1. Click Add (+).
  1. Enter the Name of the Security Group, check the Mark this object for Universal Synchronisation and (optionally) check the Use for active standby deployments.
  1. Click Next.
  1. Define Membership Criteria as required and (optionally) add additional criteria using Add (+).
  1. Select IP Sets, Security Tag, MAC Sets or Security Group from the Object Type dropdown.
  1. Select the desired object from the Available Objects list and click the arrow to move it to the Select Objects list.
  1. Click Next.
  1. Click Finish.

Configure Universal Firewall Rules

  1. Using your favourite web browser, navigate to the vCenter Server login page (https://vcenter.fqdn).
  1. Enter appropriate User name and Password and click Login.
  1. Click Networking and Security.
  1. Click Firewall.
  1. Click New Section.
  1. Enter a Name for the New Section and check the Mark this section for Universal Synchronization checkbox.
  1. Click Save.
  1. Click Publish Changes.
  1. Under the new Universal Section, click Add Rule.

Update the Firewall Rule Name

  1. Highlight the new Universal Firewall Rule and click Edit Name.
  1. Enter the new Rule Name and click Save.

Update the Firewall Rule Source

  1. Under Source, click Edit.
  1. Select a Universal object from the Object Type dropdown, highlight an item from the Available Objects list and click the arrow to move the item to the Selected Objects list.
  1. Click OK.

Update the Firewall Rule Destination

  1. Under Destination, click Edit.
  1. Select a Universal object from the Object Type dropdown, highlight an item from the Available Objects list and click the arrow to move the item to the Selected Objects list.
  1. Click OK.

Update the Firewall Rule Service

  1. Under Service, click Edit.
  1. Select a Universal object from the Object Type dropdown, highlight an item from the Available Objects list and click the arrow to move the item to the Selected Objects list.
  1. Click OK.

(Optional) Update the Firewall Rule Action

  1. Under Action, click Edit.
  1. Make changes to the required Action and click Save.

(Optional) Update the Firewall Rule Filter (Applied To)

  1. Under Applied To, click Edit.
  1. Select a Universal object from the Object Type dropdown, highlight an item from the Available Objects list and click the arrow to move the item to the Selected Objects list.
  1. Click OK.

Publish the Firewall Rule

  1. Click Publish Changes.

Published on 20 November 2017 by Christopher Lewis. Words: 711. Reading Time: 4 mins.


Blog Categories: VMware NSX NSX-V Certification
Related Post(s):
Recent Posts:
  • Creating a Custom Resource Action - Part 1: Getting Started & API Discovery
  • Operating a Private Cloud - Part 3: Creating a Pricing Card in VMware Aria Automation
  • Operating a Private Cloud - Part 2: Creating a Pricing Card in VMware Aria Operations
  • Operating a Private Cloud - Part 1: Understanding Pricing Cards in VMware Aria
  • Zero2Hero - Using Aria Automation to Deploy Multiple Machines with Multiple Disks - Part 5
    • Blog Categories:
    active directory 6 aria automation 9 aria automation orchestrator 1 aria operations 2 aws 2 blog 1 career 1 certificate authority 5 certificates 5 certification 91 cloud management 1 cloudnativecon 1 community 1 fun 1 general 9 hands on labs 1 home lab 2 kubecon 1 kubernetes 1 microsoft 7 nsx 45 nsx v 41 powercli 8 powershell 6 reviews 1 vcap 48 vcap6 2 vcenter 4 vcix 2 vexpert 9 vmug 5 vmware 99+ vmware aria 1 vmware aria automation 9 vmware aria automation orchestrator 1 vmware aria operations 3 vmware cloud 3 vmware cloud director 1 vmware explore 2 vmware identity manager 2 vmworld 36 vrealize automation 80 vrealize automation saltstack config 1 vrealize business 2 vrealize log insight 1 vrealize operations 1 vrealize operations manager 5 vrealize orchestrator 13 vrealize suite 14 vrealize suite lifecycle manager 20 vsan 5 vsphere 9 windows 6
    Top Tags:
    active directory 6 api 18 barcelona 24 certificates 11 certification 7 howto 33 microsoft 7 multi tenancy 9 nsx v 43 platform services controller 8 powercli 8 powershell 7 psc 6 vcap 9 vcap6 45 vcap6 cma 48 vcap6 nv 37 vcix6 nv 36 vexpert 19 vmug 8 vmware 99+ vmware aria 10 vmware aria automation 9 vmworld 35 vmworld 2016 13 vmworld 2017 9 vra 13 vrealize automation 74 vrealize operations 8 vrealize orchestrator 21 vrealize suite lifecycle manager 11 vrslcm 20 vsan 7 vsphere 12