You can configure the ESXi firewall at the command line.
Firewall Configuration Using the ESXi Shell
The vSphere Web Client graphical user interface provides the preferred means of performing many configuration tasks. However, you can use the ESXi Shell to configure ESXi at the command line.
Firewall Commands
|
|
esxcli network firewall get
|
Returns the enabled or disabled status of the firewall and lists default actions.
|
esxcli network firewall set –default-action
|
Update default actions.
|
esxcli network firewall set –enabled
|
Enable or disable the ESXi firewall.
|
esxcli network firewall load
|
Load the firewall module and rule set configuration files.
|
esxcli network firewall refresh
|
Refresh the firewall configuration by reading the rule set files if the firewall module is loaded.
|
esxcli network firewall unload
|
Destroy filters and unload the firewall module.
|
esxcli network firewall ruleset list
|
List rule sets information.
|
esxcli network firewall ruleset set –allowed-all
|
Set the allowedall flag.
|
esxcli network firewall ruleset set –enabled
|
Enable or disable the specified rule set.
|
esxcli network firewall ruleset allowedip list
|
List the allowed IP addresses of the specified rule set.
|
esxcli network firewall ruleset allowedip add
|
Allow access to the rule set from the specified IP address or range of IP addresses.
|
esxcli network firewall ruleset allowedip remove
|
Remove access to the rule set from the specified IP address or range of IP addresses.
|