VMware, Inc. 157
Chapter 9 User API Reference
FirewallRule
TheFirewallRuleelementdefinesasinglefirewallrule.
Policy
ThePolicyelementofaFirewallRulespecifieshowpacketsarehandledbythefirewall.Table 9‐2shows
permittedvaluesforelementcontentandtheresultstheyproduce.
Protocols
TheProtocolselementspecifiestheprotocolstowhichfirewallrulesapply.
NatService
TheNatServiceelementdefinesthenetworkaddresstranslationcapabilitiesofanetwork.
Schema
Name Min Max Type Description
IsEnabled 0 1 xs:boolean Trueiftheruleisenabled
Description 0 1 xs:string descriptionoftherule
Policy 0 1 FirewallPolicyType Specifieshowpacketsarehandledbythefirewall
Protocols 0 1 ProtocolsType Specifiestheprotocolstowhichthisfirewallruleapplies
Port 1 1 xs:int Specifiesthenetworkporttowhichthisfirewallruleapplies.
Avalueof‐1matchesanyport.
DestinationIp 1 1 IpAddressType SpecifiesthedestinationIPaddress,insidethe
firewall,to
whichthisfirewallruleapplies
Table 9-2. FirewallRule Policy Element Values
Value Result
drop Droppacketsofthistype
allow Allowpacketsofthistypetopassthroughthefirewall
Schema
Name Min Max Type Description
Tcp 0 1 xs:boolean TrueifthefirewallrulesapplytotheTCPprotocol
Udp 0 1 xs:boolean TrueifthefirewallrulesapplytotheUDPprotocol
Schema
Name Min Max Type Description
IsEnabled 0 1 xs:boolean Trueiftheserviceisenabled
NatType 0 1 NatTypeType SpecifieshowNetworkAddressTranslationis
implementedbytheNATservice
Policy 0 1 NatPolicyType SpecifieshowpacketsarehandledbytheNATservice
NatRule 0 n NatRuleType SpecifiesasingleNATrule