2.0

Table Of Contents
VMware, Inc. 141
Chapter 6 Setting and Using Policies and Customizing VMware Player
Packet-to-Rule Comparison
Therulesintheruleseteditorarelistedintheorderinwhichtheyaretobeevaluated.
Whenanetworktrafficpacketarrivesoristobesentfromthehostorguest,itis
comparedwitheachruleintheruleset,inorderfromthetopdown.Ifthe
packet’s
settings(thatis,sourceaddressforincomingpackets,destinationaddressforoutgoing
packets,protocol,andports)matchtheruleconditions,thepacketisallowedorblocked
accordingtotherule’saction.Thepacketiscomparedtoeachruleinorderuntileither
itmatchesaruleorithas
beencomparedwithalloftherules.Whenamatchismade,
thepackettorulecomparisonends;thepacketisnotcomparedtosubsequentrulesin
theorderedlist.Ifithasbeencomparedtoallruleswithoutamatch,thedefaultrule
actionisapplied.
Network Properties Packaging
Youcanusethenetworkpropertiespackagingfeatureofthenetworkaccesspolicyto
specifytheIPaddressrangeforthevirtualnetworkVMnet8ontheACEinstance’shost
system.YoudeploythisnetworkpropertiessettingwiththeACEpackage.
To specify the subnet range for VMnet8
1FortheACEmasteryouwanttopackagewiththesenetworkproperties,select
Policies>NetworkAccess.
2ClickNATSettingsonthepolicypage.TheVirtualNetworkSettingsdialogbox
appears.
3 SelectAssignIPaddressesfromthissubnet.
4TypethesubnetIPaddressyouwanttouse,enteringzero(0)as
thelastbyteinthe
address.
5ClickOK.
CAUTIONIfyousetthisproperty,thesettingaffectsalltheACEinstancesandvirtual
machinesonthisinstance’shostsystem.
NOTEThenetworkpropertiespackagingsettingisnotadynamicpolicysetting.You
canonlychangethesettingbychangingitinthepolicy,thencreatinganewACE
packageanddeployingthepackage.