PowerCLI Reference

Set-SecurityPolicy

Synopsis

This cmdlet modifies the security policy for virtual port groups or the default port security policy for virtual switches.

Syntax

Set-SecurityPolicy [-VirtualPortGroupPolicy] <VirtualPortgroupSecurityPolicy[]> [-AllowPromiscuous <Boolean>] [-AllowPromiscuousInherited <Boolean>] [-ForgedTransmits <Boolean>] [-ForgedTransmitsInherited <Boolean>] [-MacChanges <Boolean>] [-MacChangesInherited <Boolean>] [-Confirm] [-WhatIf] [<CommonParameters>]

Set-SecurityPolicy [-VirtualSwitchPolicy] <VirtualSwitchSecurityPolicy[]> [-AllowPromiscuous <Boolean>] [-ForgedTransmits <Boolean>] [-MacChanges <Boolean>] [-Confirm] [-WhatIf] [<CommonParameters>]

Related Commands

Online Version
Get-SecurityPolicy

Detailed Description

This cmdlet modifies the security policy for virtual port groups or the default port security policy for virtual switches. Specifying a parameter automatically changes the parameter's Inherited setting to 'false'. Specifying the parameter's Inherited setting as 'true' automatically applies the switch level security policy to the parameter.

Parameters

Name	Type	Description	Required?	Pipeline Input
VirtualPortGroupPolicy	VirtualPortgroupSecurityPolicy[]	Specifies the virtual port group security policy that you want to configure.	true	True (ByValue)
VirtualSwitchPolicy	VirtualSwitchSecurityPolicy[]	Specifies the virtual switch security policy that you want to configure.	true	True (ByValue)
AllowPromiscuous	Boolean	Specifies whether promiscuous mode is enabled for the corresponding virtual port group or switch.	false	False
AllowPromiscuousInherited	Boolean	Specifies whether the AllowPromiscuous setting is inherited from the parent virtual switch.	false	False
Confirm	SwitchParameter	If the value is $true, indicates that the cmdlet asks for confirmation before running. If the value is $false, the cmdlet runs without asking for user confirmation.	false	False
ForgedTransmits	Boolean	Specifies whether forged transmits are enabled for the corresponding virtual port group or switch.	false	False
ForgedTransmitsInherited	Boolean	Specifies whether the ForgedTransmits setting is inherited from the parent virtual switch.	false	False
MacChanges	Boolean	Specifies whether MAC address changes are enabled for the corresponding virtual port group or switch.	false	False
MacChangesInherited	Boolean	Specifies whether the MacChanges setting is inherited from the parent virtual switch.	false	False
WhatIf	SwitchParameter	Indicates that the cmdlet is run only to display the changes that would be made and actually no objects are modified.	false	False

Return Type

The modified VirtualSwitchSecurityPolicy or VirtualPortgroupSecurityPolicy objects

Notes

Examples

-------------------------- Example 1 --------------------------

Get-VirtualSwitch -Name "MyVirtualSwitch" | Get-SecurityPolicy | Set-SecurityPolicy -MacChanges $false

Retrieves a virtual switch named "MyVirtualSwitch" and updates its security policy to forbid MAC address changes.

-------------------------- Example 2 --------------------------

Get-VirtualPortgroup -Name "MyVirtualPortGroup" | Get-SecurityPolicy | Set-SecurityPolicy -ForgedTransmitsInherited $true

Retrieves a virtual port group named "MyVirtualPortGroup" and updates the security policy to inherit the setting value for controlling outbound frames filtering by MAC address from its parent.