Cisco Systems CL-28826-01 Understanding Interface Role Objects

6-67
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter6 Managing Policy Objects
Understanding Interface Role Objects
Recurring Ranges Dialog Box
Use the Recurring Ranges dialog box to add or edit recurring time intervals that are defined as part of a
time range object. You can define as many recurring ranges as required.
Navigation Path
Go to the Add or Edit Time Range dialog box and click the New Recurring Range button under
Recurring Ranges, or select a range and click Edit Recurring Range. See Configuring Time Range
Objects, page 6-66.
Field Reference
Understanding Interface Role Objects
Interface Role objects have the following uses:
•Specifying multiple interfaces— Interface role objects allow you to apply policies to specific
interfaces on multiple devices without having to manually define the names of each interface.
Because most devices follow a standard naming convention for their interfaces, you can define a
naming pattern that describes a particular interface type and then assign a policy to all interfaces
matching that pattern.
•Zones—You use interface role objects to define the zones in a zone-based firewall rules policy.
For example, you might define an interface role with a naming pattern of DMZ*. When you include this
interface role in a policy, the policy is applied to all interfaces whose name begins with “DMZ” on the
selected devices. As a result, you can, for example, assign a policy that enables anti-spoof checking on
all DMZ interfaces to all relevant device interfaces with a single action. Interface roles can refer to any
of the actual interfaces on the device, including physical interfaces, subinterfaces, and virtual interfaces,
such as loopback interfaces.
Table6-26 Recurring Ranges Dialog Box
Element Description
Specify days of the week and
times during which this
recurring range will be active
Defines a recurring range that is based on specific days and times of the
week. You can select from:
•Every day
•Weekdays
•Weekends
•On these days of the week—Select the specific days to include in
the range.
Also select the starting and ending time during the day. The default is
all day.
Specify a weekly interval
during which this recurring
range will be active
Defines a recurring range for every week. Select the starting and ending
day and time. For example, you can start the weekly period on Sunday
and end it on Thursday.