< Back
Get-NsxSecurityGroupEffectiveIpAddress
Post
NAME Get-NsxSecurityGroupEffectiveIpAddress
SYNOPSIS
Determines the effective VM membership of a security group.
SYNTAX
Get-NsxSecurityGroupEffectiveIpAddress -SecurityGroup <XmlElement> [-Connection <PSObject>] [<CommonParameters>]
Get-NsxSecurityGroupEffectiveIpAddress [-SecurityGroupId] <String> [-Connection <PSObject>] [<CommonParameters>]
DESCRIPTION
An NSX SecurityGroup can contain members (VMs, IP Addresses, MAC Addresses
or interfaces) by virtue of direct, or indirect membership (nested security
groups), and either by static or dynamic inclusion.
In addition, direct or indirect exclusions can also
modify membership.
This cmdlet uses the NSX 'Translation APIs' to determine the
'Effective VM Membership' of a given security group. The membership output
by this cmdlet is determined by NSX itself.
Note: In order for IPAddress membership to be accurate, IP Discovery
of virtual machines must be operational (as it must for the dataplane to
function as well.)
If IPAddress membership is not accurately represented here, verify that
an appropriate IP discovery mechanism is operational, and NSX 'detects'
the ip addresses you are expecting. Using the Get-NsxSpoofguardNic cmdlet
will allow visibility of the detection state of a given nic or VM.
PARAMETERS
-SecurityGroup <XmlElement>
Required? true
Position? named
Default value
Accept pipeline input? true (ByValue)
Accept wildcard characters? false
-SecurityGroupId <String>
Required? true
Position? 2
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Connection <PSObject>
PowerNSX Connection object
Required? false
Position? named
Default value $defaultNSXConnection
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
-------------------------- EXAMPLE 1 --------------------------
PS C:\\>Get-NsxSecurityGroup TestSG | Get-Get-NsxSecurityGroupEffectiveIpAddress
IpAddress
---------
fe80::250:56ff:fe80:3e20
Determine the effective ipaddress membership of securitygroup
-------------------------- EXAMPLE 2 --------------------------
PS C:\\>Get-NsxSecurityGroup TestSG | Get-Get-NsxSecurityGroupEffectiveIpAddress
IpAddress
---------
fe80::250:56ff:fe80:3e20
Determine the effective ipaddress membership of a security group by objectid
RELATED LINKS
SYNOPSIS
Determines the effective VM membership of a security group.
SYNTAX
Get-NsxSecurityGroupEffectiveIpAddress -SecurityGroup <XmlElement> [-Connection <PSObject>] [<CommonParameters>]
Get-NsxSecurityGroupEffectiveIpAddress [-SecurityGroupId] <String> [-Connection <PSObject>] [<CommonParameters>]
DESCRIPTION
An NSX SecurityGroup can contain members (VMs, IP Addresses, MAC Addresses
or interfaces) by virtue of direct, or indirect membership (nested security
groups), and either by static or dynamic inclusion.
In addition, direct or indirect exclusions can also
modify membership.
This cmdlet uses the NSX 'Translation APIs' to determine the
'Effective VM Membership' of a given security group. The membership output
by this cmdlet is determined by NSX itself.
Note: In order for IPAddress membership to be accurate, IP Discovery
of virtual machines must be operational (as it must for the dataplane to
function as well.)
If IPAddress membership is not accurately represented here, verify that
an appropriate IP discovery mechanism is operational, and NSX 'detects'
the ip addresses you are expecting. Using the Get-NsxSpoofguardNic cmdlet
will allow visibility of the detection state of a given nic or VM.
PARAMETERS
-SecurityGroup <XmlElement>
Required? true
Position? named
Default value
Accept pipeline input? true (ByValue)
Accept wildcard characters? false
-SecurityGroupId <String>
Required? true
Position? 2
Default value
Accept pipeline input? false
Accept wildcard characters? false
-Connection <PSObject>
PowerNSX Connection object
Required? false
Position? named
Default value $defaultNSXConnection
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
OUTPUTS
-------------------------- EXAMPLE 1 --------------------------
PS C:\\>Get-NsxSecurityGroup TestSG | Get-Get-NsxSecurityGroupEffectiveIpAddress
IpAddress
---------
fe80::250:56ff:fe80:3e20
Determine the effective ipaddress membership of securitygroup
-------------------------- EXAMPLE 2 --------------------------
PS C:\\>Get-NsxSecurityGroup TestSG | Get-Get-NsxSecurityGroupEffectiveIpAddress
IpAddress
---------
fe80::250:56ff:fe80:3e20
Determine the effective ipaddress membership of a security group by objectid
RELATED LINKS