5.1

vShield Edge Management 9
vShield Edge provides network edge security and gateway services to isolate the virtual machines in a port
group, vDS port group, or Cisco
®
Nexus 1000V. The vShield Edge connects isolated, stub networks to shared
(uplink) networks by providing common gateway services such as DHCP, VPN, NAT, and Load Balancing.
Common deployments of vShield Edge include in the DMZ, VPN Extranets, and multi-tenant Cloud
environments where the vShield Edge provides perimeter security for Virtual Datacenters (VDCs).
This chapter includes the following topics:
n
“View the Status of a vShield Edge,” on page 62
n
“Configure vShield Edge Settings,” on page 62
n
“Managing Appliances,” on page 62
n
“Working with Interfaces,” on page 64
n
“Working with Certificates,” on page 67
n
“Managing the vShield Edge Firewall,” on page 70
n
“Managing NAT Rules,” on page 75
n
“Working with Static Routes,” on page 77
n
“Managing DHCP Service,” on page 78
n
“Managing VPN Services,” on page 80
n
“Managing Load Balancer Service,” on page 135
n
“About High Availability,” on page 140
n
“Configure DNS Servers,” on page 141
n
“Configure Remote Syslog Servers,” on page 142
n
“Change CLI Credentials,” on page 142
n
“Upgrade vShield Edge to Large or X-Large,” on page 142
n
“Download Tech Support Logs for vShield Edge,” on page 143
n
“Synchronize vShield Edge with vShield Manager,” on page 143
n
“Redeploy vShield Edge,” on page 144
VMware, Inc.
61