Configure Security Settings for vCenter Server by Using PowerCLI

To configure host password length, native VLAN, reserved VLAN, and VGT, you perform the procedure on all vCenter Servers instances.

Procedure

1. Log in to vCenter Server by using a PowerCLI console.​

   Setting	Value
   Command	Connect-VIServer -Server management-domain-vcenter-server-fqdn​​ -Protocol https
   User name​	[email protected]​

2. VMW-VC-01201 Configure all port groups to a value different from the value of the native VLAN.

   Get-VDPortgroup "portgroup name" | Set-VDVlanConfiguration -VlanId "New VLAN#"

3. VMW-VC-01202 Configure all port groups to VLAN values not reserved by upstream physical switches

   Get-VDPortgroup "portgroup name" | Set-VDVlanConfiguration -VlanId "New VLAN#" 

4. VMW-VC-01227 Do not configure VLAN trunking in vCenter Server unless Virtual Guest Tagging (VGT) is required and authorized.
   1. (Optional) If you use VLAN ranges, enter VLAN ranges with a comma separated value to configure trunking.

      Get-VDPortgroup "Portgroup Name" | Set-VDVlanConfiguration -VlanTrunkRange "<VLAN Range(s) comma separated>" 

   2. (Optional) If you use a single VLAN, enter a single VLAN ID to configure trunking.

      Get-VDPortgroup "Portgroup Name" | Set-VDVlanConfiguration -VlanId "<New VLAN#>"