5.1

4 Click the Firewall tab and click Add.
5 Type a name for the rule.
6 (Optional) Select Match rule on translated IP to have the rule check against translated IP addresses rather
than original IP addresses and choose a traffic direction to apply this rule on.
7 Type the traffic Source.
Option Description
IP address
Type a source IP address to apply this rule on.
Range of IP addresses
Type a range of source IP addresses to apply this rule on.
CIDR
Type the CIDR notation of traffic to apply this rule on.
internal
Apply this rule to all internal traffic.
external
Apply this rule to all external traffic.
any
Apply this rule to traffic from any source.
8 Select a Source port to apply this rule on from the drop-down menu.
9 Type the traffic Destination.
Option Description
IP address
Type a destination IP address to apply this rule on.
Range of IP addresses
Type a range of destination IP addresses to apply this rule on.
CIDR
Type the CIDR notation of traffic to apply this rule on.
internal
Apply this rule to all internal traffic.
external
Apply this rule to all external traffic.
any
Apply this rule to traffic with any destination.
10 Select the Destination port to apply this rule on from the drop-down menu.
11 Select the Protocol to apply this rule on from the drop-down menu.
12 Select the action.
A firewall rule can allow or deny traffic that matches the rule.
13 Select the Enabled check box.
14 (Optional) Select the Log network traffic for firewall rule check box.
If you enable this option, vCloud Director sends log events to the syslog server for connections affected
by this rule. Each syslog message includes logical network and organization UUIDs.
15 Click OK and click OK again.
Reorder Firewall Rules for an Edge Gateway
Firewall rules are enforced in the order in which they appear in the firewall list. You can change the order of
the rules in the list.
When you add a new firewall rule to an edge gateway, it appears at the bottom of the firewall rule list. To
enforce the new rule before an existing rule, reorder the rules.
Procedure
1 Click the Manage & Monitor tab and click Organization vDCs in the left pane.
2 Double-click the organization vDC name to open the organization vDC.
3 Click the Edge Gateways tab, right-click the edge gateway name and select Edge Gateway Services.
vCloud Director Administrator's Guide
70 VMware, Inc.