You can configure the ESXi firewall at the command line.

Firewall Configuration Using the ESXi Shell

The vSphere Web Client graphical user interface provides the preferred means of performing many configuration tasks. However, you can use the ESXi Shell or vSphere CLI commands to configure ESXi at the command line if necessary. See Getting Started with vSphere Command-Line Interfaces

Table 1. Firewall Commands

Command

Description

esxcli network firewall get

Returns the enabled or disabled status of the firewall and lists default actions.

esxcli network firewall set --default-action

Set to true to set the default action to pass, set to fals to set the default action to drop.

esxcli network firewall set --enabled

Enable or disable the ESXi firewall.

esxcli network firewall load

Load the firewall module and rule set configuration files.

esxcli network firewall refresh

Refresh the firewall configuration by reading the rule set files if the firewall module is loaded.

esxcli network firewall unload

Destroy filters and unload the firewall module.

esxcli network firewall ruleset list

List rule sets information.

esxcli network firewall ruleset set --allowed-all

Set to true to allow all access to all IPs, set to false to use a list of allowed IP addresses.

esxcli network firewall ruleset set --enabled --ruleset-id=<string>

Set enabled to true or false to enable or disable the specified ruleset.

esxcli network firewall ruleset allowedip list

List the allowed IP addresses of the specified rule set.

esxcli network firewall ruleset allowedip add

Allow access to the rule set from the specified IP address or range of IP addresses.

esxcli network firewall ruleset allowedip remove

Remove access to the rule set from the specified IP address or range of IP addresses.

esxcli network firewall ruleset rule list

List the rules of each ruleset in the firewall.