Add-AzServiceFabricManagedClusterNetworkSecurityRule

Referencia

Módulo:: Az.ServiceFabric

Agregue una regla de seguridad de red al recurso de clúster.

Syntax

Add-AzServiceFabricManagedClusterNetworkSecurityRule
   [-InputObject] <PSManagedCluster>
   -Access <NetworkSecurityAccess>
   [-Description <String>]
   -DestinationAddressPrefix <String[]>
   -DestinationPortRange <String[]>
   -Direction <NetworkSecurityDirection>
   -Name <String>
   -Priority <Int32>
   -Protocol <NetworkSecurityProtocol>
   -SourceAddressPrefix <String[]>
   -SourcePortRange <String[]>
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Add-AzServiceFabricManagedClusterNetworkSecurityRule
   [-ResourceGroupName] <String>
   [-ClusterName] <String>
   -Access <NetworkSecurityAccess>
   [-Description <String>]
   -DestinationAddressPrefix <String[]>
   -DestinationPortRange <String[]>
   -Direction <NetworkSecurityDirection>
   -Name <String>
   -Priority <Int32>
   -Protocol <NetworkSecurityProtocol>
   -SourceAddressPrefix <String[]>
   -SourcePortRange <String[]>
   [-AsJob]
   [-DefaultProfile <IAzureContextContainer>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

Agregue una regla de seguridad de red al recurso de clúster. Esto agregará una regla de seguridad de red con las propiedades especificadas.

Ejemplos

Ejemplo 1

$resourceGroupName = "sfmcps-test-rg"
$clusterName = "sfmcps-test-cluster"
$NSRName = "testSecRule1"
$sourcePortRanges = "1-1000"
$destinationPortRanges = "1-65535"
$destinationAddressPrefixes = "194.69.104.0/25", "194.69.119.64/26", "167.220.249.128/26", "255.255.255.255/32"
$sourceAddressPrefixes = "167.220.242.0/27", "167.220.0.0/23", "131.107.132.16/28", "167.220.81.128/26"

$cluster = Add-AzServiceFabricManagedClusterNetworkSecurityRule -ResourceGroupName $resourceGroupName -ClusterName $clusterName `
        -Name $NSRName -Access Allow -Direction Outbound -Protocol tcp -Priority 1200 -SourcePortRange $sourcePortRange -DestinationPortRange $destinationPortRanges -DestinationAddressPrefix $destinationAddressPrefixes -SourceAddressPrefix $sourceAddressPrefixes -Verbose

Este comando agregará una regla de seguridad de red con las propiedades anteriores.

Ejemplo 2

$resourceGroupName = "sfmcps-test-rg"
$clusterName = "sfmcps-test-cluster"
$NSRName = "testSecRule2"
$sourcePortRanges = "1-1000"
$destinationPortRanges = "1-65535"
$destinationAddressPrefixes = "194.69.104.0/25", "194.69.119.64/26", "167.220.249.128/26", "255.255.255.255/32"
$sourceAddressPrefixes = "167.220.242.0/27", "167.220.0.0/23", "131.107.132.16/28", "167.220.81.128/26"

$cluster = Add-AzServiceFabricManagedClusterNetworkSecurityRule -ResourceGroupName $resourceGroupName -ClusterName $clusterName `
        -Name $NSRName -Access Deny -Direction Outbound -Protocol udp -Priority 1300 -SourcePortRange $sourcePortRange -DestinationPortRange $destinationPortRanges -DestinationAddressPrefix $destinationAddressPrefixes -SourceAddressPrefix $sourceAddressPrefixes -Verbose

Similar a Example1 con propiedades diferentes.

Ejemplo 3

$resourceGroupName = "sfmcps-test-rg"
$clusterName = "sfmcps-test-cluster"
$NSRName = "testSecRule3"
$description = "test network security rule"
$sourcePortRanges = "1-1000"
$destinationPortRanges = "1-65535"
$destinationAddressPrefixes = "194.69.104.0/25", "194.69.119.64/26", "167.220.249.128/26", "255.255.255.255/32"
$sourceAddressPrefixes = "167.220.242.0/27", "167.220.0.0/23", "131.107.132.16/28", "167.220.81.128/26"

$cluster = $clusterFromGet | Add-AzServiceFabricManagedClusterNetworkSecurityRule `
        -Name $NSRName -Access Allow -Description $description -Direction Outbound -Protocol tcp -Priority 1400 -SourcePortRange $sourcePortRanges -DestinationPortRange $destinationPortRanges -DestinationAddressPrefix $destinationAddressPrefixes -SourceAddressPrefix $sourceAddressPrefixes -Verbose

Este comando agregará una regla de seguridad de red mediante el objeto de clúster con canalización.

Parámetros

-Access

Obtiene o establece el tráfico de red permitido o denegado. Entre los valores posibles se incluyen: Allow, Deny

Type:	NetworkSecurityAccess
Accepted values:	Allow, Deny
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-AsJob

Ejecución del cmdlet en segundo plano y devolución de un trabajo para realizar un seguimiento del progreso

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ClusterName

Especifique el nombre del clúster.

Type:	String
Position:	1
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-Confirm

Le solicita su confirmación antes de ejecutar el cmdlet.

Type:	SwitchParameter
Aliases:	cf
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DefaultProfile

Credenciales, cuenta, inquilino y suscripción usados para la comunicación con Azure.

Type:	IAzureContextContainer
Aliases:	AzContext, AzureRmContext, AzureCredential
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Description

Obtiene o establece la descripción de la regla de seguridad de red.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DestinationAddressPrefix

Obtiene o establece los prefijos de dirección de destino. Intervalos IP de CIDR o de destino

Type:	String[]
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-DestinationPortRange

Obtiene o establece los intervalos de puertos de destino.

Type:	String[]
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-Direction

Obtiene o establece la dirección de la regla de seguridad de red. Entre los valores posibles se incluyen: Entrante, Saliente

Type:	NetworkSecurityDirection
Accepted values:	Inbound, Outbound
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-InputObject

Recurso de clúster administrado

Type:	PSManagedCluster
Position:	0
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-Name

Nombre de la regla de seguridad de red

Type:	String
Aliases:	NetworkSecurityRuleName
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-Priority

Obtiene o establece la prioridad de la regla. El valor puede estar comprendido entre 1000 y 3000. Los valores fuera de este intervalo están reservados para Service Fabric Manager Provider De recursos deCluster. El número de prioridad debe ser único para cada regla de la colección. Cuanto menor sea el número de prioridad, mayor será la prioridad de la regla.

Type:	Int32
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-Protocol

Obtiene o establece el protocolo de red al que se aplica esta regla. Entre los valores posibles se incluyen: http, https, tcp, udp, icmp, ah, esp, any

Type:	NetworkSecurityProtocol
Accepted values:	https, http, udp, tcp, esp, icmp, ah, any
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-ResourceGroupName

Especifique el nombre del grupo de recursos.

Type:	String
Position:	0
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-SourceAddressPrefix

Obtiene o establece los intervalos CIDR o IP de origen.

Type:	String[]
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-SourcePortRange