5.1

Delete an IP Address Group
An IP address group can be deleted at the scope it was defined at. For example, if an IP address group was
defined at the global scope, it cannot be deleted at the vShield Edge scope.
Procedure
1 Do one of the following.
Option Description
To delete an IP address group at the
global scope
a In the vShield Manager user interface, click Object Library from the
vShield Manager inventory panel.
b Ensure that you are in the Grouping tab.
To delete an IP address group at the
datacenter scope
a In the vSphere Client, go to Inventory > Hosts & Clusters.
b Select a datacenter resource from the inventory panel.
c Click the vShield tab.
d From the General tab, select the Grouping tab.
To delete an IP address group at the
port group scope
a In the vSphere Client, go to Inventory > Networking.
b Select a network from the inventory panel.
c Click the vShield tab.
To delete an IP address group at the
vShield Edge scope
a In the vSphere Client, go to Inventory > Hosts & Clusters.
b Select a datacenter resource from the inventory panel.
c Click the Network Virtualization tab.
d Click the Edges tab.
e Double-click a vShield Edge instance.
f Click the Configure tab.
2 Click the Grouping Objects tab.
3
Select the group that you want to delete and click the Delete ( ) icon.
Working with MAC Address Groups
Create a MAC Address Group
You can create a MAC address group consisting of a range of MAC addresses and then add this group as the
source or destination in a vShield App firewall rule. Such a rule can help protect physical machines from virtual
machines or vice versa.
Procedure
1 Do one of the following.
Option Description
To create a MAC address group at
the global level
a In the vShield Manager user interface, click Object Library from the
vShield Manager inventory panel.
b Ensure that you are in the Grouping tab.
To create a MAC address group at
the datacenter level
a In the vSphere Client, go to Inventory > Hosts & Clusters.
b Select a datacenter resource from the inventory panel.
c Click the vShield tab.
d From the General tab, select the Grouping tab.
To create a MAC address at the port
group level
a In the vSphere Client, go to Inventory > Networking.
b Select a network from the inventory panel.
c Click the vShield tab.
vShield Administration Guide
26 VMware, Inc.