Set-NetworkController

Set-NetworkController

Sets network controller application settings.

구문

Parameter Set: Default
Set-NetworkController [-CertificateThumbprint <String> ] [-ClientAuthentication <ClientAuthentication> {None | Kerberos | X509} ] [-ClientCertificateThumbprint <String[]> ] [-ClientSecurityGroup <String> ] [-ComputerName <String> ] [-Credential <PSCredential> ] [-PassThru] [-RestIPAddress <String> ] [-RestName <System.String> ] [-ServerCertificate <System.Security.Cryptography.X509Certificates.X509Certificate2> ] [-UseSsl] [-Confirm] [-WhatIf] [ <CommonParameters>]

자세한 설명

The Set-NetworkController cmdlet sets network controller application settings. You can modify the following settings:

-- Client authentication mode.
-- Client security group. If the client authentication mode is Kerberos, you must specify a client security group.
-- Client certificate thumbprints. If the client authentication mode is x509, you must specify certificate thumbprints.
-- The IP address that network controller uses for representational state transfer (REST) communication.
-- Secure Sockets Layer (SSL) certificate that network controller uses for encrypting the communication between the REST clients and the network controller, as well as to secure communication with southbound clients.

매개 변수

-CertificateThumbprint<String>

Specifies the digital public key X.509 certificate of a user account that has permission to perform this action. Specify the certificate thumbprint of the certificate. Specify this parameter only if you run this cmdlet on a computer that is not part of the network controller cluster.

-ClientAuthentication<ClientAuthentication>

Specifies the type of authentication that network controller uses to communicate with REST clients. 이 매개 변수에 허용되는 값은 다음과 같습니다.

-- Kerberos
-- X509
-- None

If the clients and network controller computers are domain joined, you should specify Kerberos authentication. Otherwise, specify X509 authentication. We do not recommend a value of None for production environments.

-ClientCertificateThumbprint<String[]>

Specifies an array of thumbprints of the certificates of REST clients that can communicate with the network controller. Specify this parameter only if the value of the ClientAuthentication parameter is X509.

-ClientSecurityGroup<String>

Specifies the security group that contains the name of the REST clients that can communicate with the network controller. Specify this parameter only if the value of the ClientAuthentication parameter is Kerberos.

-ComputerName<String>

Specifies the name of the network controller node on which this cmdlet operates.

-Credential<PSCredential>

Specifies a user credential that has permission to perform this action. The default is the current user. Specify this parameter only if you run this cmdlet on a computer that is not part of the network controller cluster.

-PassThru

작업 중인 항목을 나타내는 개체를 반환합니다. 기본적으로 이 cmdlet은 출력을 생성하지 않습니다.

-RestIPAddress<String>

Specifies the IP address on which network controller nodes communicate with the REST clients. This IP address must not be an existing IP address on any of the network controller nodes.

-RestName<System.String>

Specifies the DNS name of the Network Controller cluster. This must be specified if the Network Controller nodes are in different subnets. In this case, you must also enable dynamic registration of the RestName on the DNS servers.

-ServerCertificate<System.Security.Cryptography.X509Certificates.X509Certificate2>

Specifies the certificate to use to encrypt communication between network controller and REST clients, and also to secure communication between Network Controller and the southbound clients. This certificate must have Server Authentication EKU and should be trusted by the REST clients. Also, the certificate subject name or subject alternative name (SAN) must resolve to the REST IP address in DNS.

-UseSsl

Indicates that the remote machine uses the Secure Sockets Layer (SSL) protocol to establish a connection to the Network Controller node. The default value of this parameter is false. Specify this parameter only if you run this cmdlet on a computer that is not part of the network controller cluster.

-Confirm

cmdlet을 실행하기 전에 확인 메시지를 표시합니다.

-WhatIf

cmdlet이 실행되는 경우 발생할 결과를 보여 줍니다. cmdlet은 실행되지 않습니다.

<CommonParameters>

이 cmdlet은 -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, -OutVariable 등의 일반 매개 변수를 지원합니다. 자세한 내용은 TechNet의 about_CommonParameters(https://go.microsoft.com/fwlink/p/?LinkID=113216)

입력

입력 형식은 cmdlet으로 파이프할 수 있는 개체의 형식입니다.

출력

출력 형식은 cmdlet 실행 시 출력되는 개체의 형식입니다.

• This cmdlet returns an object that contains the following fields:

  -- Names of the network controller nodes
  -- Authentication mode used between Network Controller and the REST clients
  -- Client security group
  -- Client certificate thumbprints
  -- SSL certificate that is used for encryption of data between REST clients and network controller
  -- REST IP address
  -- Application version

예

Example 1: Change the authentication mode for clients

This command changes the authentication mechanism between REST clients and network controller to Kerberos. In order to change the authentication mode to Kerberos, you must also specify the ClientSecurityGroup parameter.

PS C:\> Set-NetworkController -ClientAuthentication Kerberos -ClientSecurityGroup "Contoso\RestClients" -PassThru

Example 2: Change the REST IP address

This command changes the REST IP address to 10.0.0.1. This command requires that the subnet mask be specified in the IP address.

PS C:\> Set-NetworkController -RestIPAddress 10.0.0.1/24

관련 항목

Export-NetworkController

Get-NetworkController

Import-NetworkController

Install-NetworkController

Uninstall-NetworkController