5.1

Delete a MAC Address Group
A MAC address group can be deleted at the scope it was defined at. For example, if a MAC address group was
defined at the global scope, it cannot be deleted at the vShield Edge scope.
Procedure
1 Do one of the following.
Option Description
To delete a MAC address group at the
global scope
a In the vShield Manager user interface, click Object Library from the
vShield Manager inventory panel.
b Ensure that you are in the Grouping tab.
To delete a MAC address group at the
datacenter scope
a In the vSphere Client, go to Inventory > Hosts & Clusters.
b Select a datacenter resource from the inventory panel.
c Click the vShield tab.
d From the General tab, select the Grouping tab.
To delete a MAC address group at the
port group scope
a In the vSphere Client, go to Inventory > Networking.
b Select a network from the inventory panel.
c Click the vShield tab.
To delete a MAC address group at the
vShield Edge scope
a In the vSphere Client, go to Inventory > Hosts & Clusters.
b Select a datacenter resource from the inventory panel.
c Click the Network Virtualization tab.
d Click the Edges tab.
e Double-click a vShield Edge instance.
f Click the Configure tab.
2 Click the Grouping Objects tab.
3
Select the group that you want to edit and click the Delete ( ) icon.
Working with Security Groups
Create a security group
In the vSphere Client, you can add a security group at the datacenter or port group level.
The security group scope is limited to the resource level at which it is created. For example, if you create a
security group at a datacenter level, the security group is available to be added as a source or destination only
when you create a firewall rule at the datacenter level. If you create a rule for a port group within that datacenter,
the security group is not available.
Procedure
1 Do one of the following.
Option Description
To create a security group at the
datacenter level
a In the vSphere Client, go to Inventory > Hosts & Clusters.
b Select a datacenter resource from the inventory panel.
c Click the vShield tab.
d In the General tab, select the Grouping tab.
To create a security group at the port
group level
a In the vSphere Client, go to Inventory > Networking.
b Select a network from the inventory panel.
c Click the vShield tab.
d Select the Grouping tab.
vShield Administration Guide
28 VMware, Inc.