VMware NSX Cookbook

How it works...

In this recipe, we have covered multiple ways to construct a security group using static and/or dynamic inclusion. The result of a dynamic security group definition is =dynamic inclusion + static inclusion - static exclusion. Any object in the Service Composer's security policy needs to be a security group, and the policy will also need be applied to one or more security groups; therefore, the security group objects must be created first before creating the security policy.

When defining security policy rules, either the source or the destination (or both) must be the policy's security group. Currently there is no menu or link in the security policy that can define a new security group on the fly.

The security group is not ...