AWS datasync documentation change
Summary
Expanded network configuration documentation to include IPv6 support, added IPv6-specific commands (ip6tables), and enhanced IP protocol settings for data transfers
Security assessment
Added documentation for IPv6 firewall rules (ip6tables) and network configuration controls, which are security features. No evidence of addressing a specific vulnerability.
Diff
diff --git a/datasync/latest/userguide/local-console-vm.md b/datasync/latest/userguide/local-console-vm.md index b7144176b..8edcbca7b 100644 --- a//datasync/latest/userguide/local-console-vm.md +++ b//datasync/latest/userguide/local-console-vm.md @@ -5 +5 @@ -Accessing your agent's local consoleConfiguring your agent's DHCP and DNS settingsChecking your agent's system resourcesSynchronizing the time on your VMware agentRunning maintenance-related commands for your agent +Accessing your agent's local consoleConfiguring your agent's DHCP, DNS, and IP settingsChecking your agent's system resourcesSynchronizing the time on your VMware agentRunning maintenance-related commands for your agent @@ -58 +58 @@ Once connected, the main menu of the agent's local console displays. -## Configuring your agent's DHCP and DNS settings +## Configuring your agent's DHCP, DNS, and IP settings @@ -70,6 +70,18 @@ To | Do this -Get information about your network adapter | Enter `1`. A list of adapter names appears, and you are prompted to enter an adapter name—for example, `eth0`. If the adapter you specify is in use, the following information about the adapter is displayed: - * Media access control (MAC) address - * IP address - * Netmask - * Agent IP address - * DHCP enabled status +Get information about your network adapter | Enter `1`. A list of adapter names appears, and you are prompted to enter an adapter name—for example, `eth0`. If the adapter you specify is in use, network information for that adapter is displayed, as in the following example: + + IP Preference: IPv4 + MAC address: 52:54:12:a4:f7:7d + + IPv4 address: 192.168.100.482 + Netmask: 255.255.255.0 + Gateway: 192.168.100.4 + DHCP enabled: Yes + + IPv6 address: abcd:4444:e5ee:fd00::4daf + Prefix length: 128 + Gateway: fe80::5021:ff:ff88:4acd + DHCPV6 enabled: Yes + + DNS: abcd:4444:e5ee:fd00::1 + DNS: 192.168.100.4 + @@ -77,2 +89,2 @@ You use the same adapter name when you configure a static IP address (option **3 -Configure DHCP | Enter `2`. You are prompted to configure the network interface to use DHCP. -Configure a static IP address for your agent | Enter `3`. You are prompted to enter the Network adapter name. +Configure DHCP | Enter `2`. Choose an IP version to use, and then configure the network interface to use DHCP. +Configure a static IP address for your agent | Enter `3`. You are prompted to choose the IP protocol to use, IPv4, IPv6, or both. Then you're prompted to enter the Network adapter name to configure a static IP address. @@ -83 +95 @@ If your agent has already been activated, you must shut it down and restart it f -Reset all your agent's network configuration to DHCP | Enter `4`. All network interfaces are set to use DHCP. +Reset all your agent's network configuration to DHCP | Enter `4`. Choose the IP version to reset to DHCP. All network interfaces for the chosen IP version are set to use DHCP. @@ -95 +107,3 @@ For some versions of the VMware hypervisor, you can edit the adapter configurati -View routing tables | Enter `8`. The default route of your agent is displayed. +View routing tables | Enter `8`. Choose the IP version (IPv4, IPv6, or both) to view the default route table for your agent. +View your agent's IP version for data transfers | Enter `9`. The agent's IP version setting for data transfers displays, either `IPv4`, `IPv6`, `IPv4 (auto)`, or `IPv6 (auto)`. +Edit your agent's IP protocol for data transfers | Enter `10`. The available IP version settings for data transfers display. You can choose either `IPv4`, `IPv6`, `IPv4 (auto)`, or `IPv6 (auto)`. For more information about your agent's IP version setting for data transfers, see [IPv6 support](./datasync-network.html#ipv6-support). @@ -182 +196,2 @@ Command | Description -`iptables` | Set up and maintain IPv4 packet filtering and network address translation (NAT). +`iptables` | Set up and maintain IPv4 packet filtering and NAT. +`ip6tables` | Set up and maintain IPv6 packet filtering and NAT. @@ -185 +200,2 @@ Command | Description -`save-iptables` | Save IP table firewall rules permanently. +`save-iptables` | Save IPv4 table firewall rules permanently. +`save-ip6tables` | Save IPv6 table firewall rules permanently.