Vester

1.2.0

Tests/Host/BDPU-Filter.Vester.ps1

                                # Test file for the Vester module - https://github.com/WahlNetwork/Vester

# Called via Invoke-Pester VesterTemplate.Tests.ps1

# vSphere 6.0 Hardening Guide Guideline ID - vNetwork.enable-bpdu-filter

# Test title, e.g. 'DNS Servers'

$Title = 'Network BDPU Filter'

# Test description: How New-VesterConfig explains this value to the user

$Description = '0 (disable) or 1 (enable) to control the BDPU filter on the ESXi host'

# The config entry stating the desired values

$Desired = $cfg.host.networkbdpufilter

# The test value's data type, to help with conversion: bool/string/int

$Type = 'int'

# The command(s) to pull the actual value for comparison

# $Object will scope to the folder this test is in (Cluster, Host, etc.)

[ScriptBlock]$Actual = {

    (Get-AdvancedSetting -Entity $Object | Where-Object -FilterScript {

        $_.Name -eq 'Net.BlockGuestBPDU'

    }).Value

}

# The command(s) to match the environment to the config

# Use $Object to help filter, and $Desired to set the correct value

[ScriptBlock]$Fix = {

    Get-AdvancedSetting -Entity $Object | Where-Object -FilterScript {

            $_.Name -eq 'Net.BlockGuestBPDU'

        } | Set-AdvancedSetting -Value $Desired -Confirm:$false -ErrorAction Stop

}