5.1

4 Type a range of IP addresses or use the default range.
vCloud Director uses these addresses to satisfy DHCP requests. The range of DHCP IP addresses cannot
overlap with the static IP pool for the organization vDC network.
5 Set the default lease time and maximum lease time or use the default values.
6 Click OK.
vCloud Director updates the network to provide DHCP services.
Configure the Firewall for an Organization vDC Network
An organization administrator can configure certain organization vDC networks to provide firewall services.
Enable the firewall on an organization vDC network to enforce firewall rules on incoming traffic, outgoing
traffic, or both.
When you enable the firewall, you can specify a default firewall action to deny all incoming and outgoing
traffic or to allow all incoming and outgoing traffic. You can also add specific firewall rules to allow or deny
traffic that matches the rules to pass through the firewall. These rules take precedence over the default firewall
action. See “Add a Firewall Rule to an Organization vDC Network,” on page 24.
If a system administrator specified syslog server settings and those settings were applied to the organization
vDC network, then you can log events related to the default firewall action. For information about applying
syslog server settings, see “Apply Syslog Server Settings to an Organization vDC Network,” on page 33. To
view the current syslog server settings see “View Syslog Server Settings for an Organization vDC Network,”
on page 33.
Prerequisites
Verify that a routed organization vDC network is in place.
Procedure
1 Click Administration and select the organization vDC.
2 Click the Org vDC Networks tab, right-click the organization vDC network name, and select Configure
Services.
3 Click the Firewall tab and select Enable firewall to enable firewall services, or deselect it to disable firewall
services.
4 Select the default firewall action.
Option Description
Deny
Blocks all traffic except when overridden by a firewall rule.
Allow
Allows all traffic except when overridden by a firewall rule.
5 (Optional) Select the Log check box to log events related to the default firewall action.
6 Click OK.
Add a Firewall Rule to an Organization vDC Network
An organization administrator can add firewall rules to an organization vDC network that supports a firewall.
You can create rules to allow or deny traffic that matches the rules to pass through the firewall.
When you add a new firewall rule to an organization vDC network, it appears at the bottom of the firewall
rule list. For information about how to set the order in which firewall rules are enforced, see “Reorder Firewall
Rules for an Organization vDC Network,” on page 26.
vCloud Director User's Guide
24 VMware, Inc.