Setting up Illumio to work with Enterprise Connector


Make sure that Illumio is set up to work with the BMC AMI Enterprise Connector for Illumio product.

Configuring Illumio PCE

Configure the following items in Illumio Policy Compute Engine (PCE):

  1. Define mainframe resources as CISCO switches.
    EC for Illumio calls these resources devices. For more information, see DEVICES in the Commands topic.
  2.  Allocate workloads to the device, where each workload represents one or more IP addresses on an LPAR.
    For example, you can define one workload per IP address type (such as OSA, VIPA, DVIPA).
  3. Define mainframe applications as services.
  4. Define rules to allow specified network resources to access specified workloads and specified services on the workloads. 

The HOSTNAME on a Workload definition specifies the 4 character LPAR name to which is applies. This is how we tie a Workload definition into a specific LPAR.

Configuring Illumio API key

To drive Illumio PCE transactions, use the Token option to add an API key generated by the PCE to the product.

  1. Enter on the main menu to select the Token option.
  2. Enter the username and secret key generated by the PCE, and press Enter.
    Token Option.png

You can also use the SETTOKEN command. For more information, see Commands.

As an alternative method, you can create an Illumio API token using the web-browser interface.

On the Manage > Create Illumio API Token window, enter the user name and the secret API key, and click Submit.

apiTokenWebUI_SPE2207.PNG


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Enterprise Connector for Illumio 2.3