gcloud vmware network-policies external-access-rules create

gcloud vmware network-policies external-access-rules create - create a VMware Engine external access firewall rule

gcloud vmware network-policies external-access-rules create (EXTERNAL_ACCESS_RULE : --location=LOCATION --network-policy=NETWORK_POLICY) --destination-ranges=DESTINATION_IP_RANGES,[…] --ip-protocol=IP_PROTOCOL --priority=PRIORITY --source-ranges=SOURCE_IP_RANGES,[…] [--action=ACTION; default="ALLOW"] [--async] [--description=DESCRIPTION] [--destination-ports=DESTINATION_PORTS,[…]] [--source-ports=SOURCE_PORTS,[…]] [GCLOUD_WIDE_FLAG …]

gcloud vmware network-policies external-access-rules create my-external-access-rule --network-policy=my-network-policy --priority=1000 --ip-protocol=TCP --source-ranges=34.148.30.114/32 --destination-ranges=projects/sample-project/locations/us-west2-a/privateClouds/my-private-cloud/externalAddresses/my-external-address --source-ports=22,10000-11000 --destination-ports=22 --action=ALLOW --location=us-west2 --project=sample-project

Or:

gcloud vmware network-policies external-access-rules create my-external-access-rule --network-policy=my-network-policy --priority=1000 --ip-protocol=TCP --source-ranges=34.148.30.114/32 --destination-ranges=projects/sample-project/locations/us-west2-a/privateClouds/my-private-cloud/externalAddresses/my-external-address --source-ports=22,10000-11000 --destination-ports=22

In the second example, the project and the location are taken from gcloud properties core/project and compute/region respectively. The --action field also isn't specified, so its value defaults to ALLOW.

VMware Engine External Access Rule resource - external_access_rule. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways.

To set the project attribute:

• provide the argument external_access_rule on the command line with a fully specified name;
• provide the argument --project on the command line;
• set the property core/project.

This must be specified.

EXTERNAL_ACCESS_RULE

ID of the VMware Engine External Access Rule or fully qualified identifier for the VMware Engine External Access Rule.

To set the external-access-rule attribute:

• provide the argument external_access_rule on the command line.

This positional argument must be specified if any of the other arguments in this group are specified.

--location=LOCATION

The resource name of the location.

To set the location attribute:

• provide the argument external_access_rule on the command line with a fully specified name;
• provide the argument --location on the command line;
• set the property compute/region.

--network-policy=NETWORK_POLICY

VMware Engine network policy

To set the network-policy attribute:

• provide the argument external_access_rule on the command line with a fully specified name;
• provide the argument --network-policy on the command line.

--destination-ranges=DESTINATION_IP_RANGES,[…]

A list of destination IP addresses that the rule applies to. Each entry in the list can be an ExternalAddress resource name or 0.0.0.0/0. When the value is set to 0.0.0.0/0, all IP addresses are allowed.

--ip-protocol=IP_PROTOCOL

Internet protocol covered by the rule. Valid values are TCP, UDP, and ICMP. IP_PROTOCOL must be one of: TCP, UDP, ICMP.

--priority=PRIORITY

Priority of this external access rule. Valid values are numbers between 100 and 4096, with 100 being the highest priority. Firewall rules are processed from highest to lowest priority.

--source-ranges=SOURCE_IP_RANGES,[…]

A list of source IP addresses that the rule applies to. Each entry in the list can be a CIDR notation or a single IP address. When the value is set to 0.0.0.0/0, all IP addresses are allowed.

--action=ACTION; default="ALLOW"

Whether the firewall rule allows or denies traffic based on a successful rule match. By default, the action is ALLOW. ACTION must be one of: ALLOW, DENY.

--async

Return immediately, without waiting for the operation in progress to complete. The default is True. Enabled by default, use --no-async to disable.

--description=DESCRIPTION

User-provided description of the external access rule.

--destination-ports=DESTINATION_PORTS,[…]

List of allowed destination ports. Each entry must be either an integer or a range.

--source-ports=SOURCE_PORTS,[…]

List of allowed source ports. Each entry must be either an integer or a range.

Run $ gcloud help for details.