25

Addresses

This chapter describes how to set up addresses and address groups for the NXC.

Use the configure terminal command to enter Configuration mode in order to use the commands described in this chapter.

25.1Address Overview

Address objects can represent a single IP address or a range of IP addresses. Address groups are composed of address objects and other address groups.

You can create IP address objects based on an interface’s IP address, subnet, or gateway. The NXC automatically updates these objects whenever the interface’s IP address settings change. This way every rule or setting that uses the object uses the updated IP address settings. For example, if you change the LAN1 interface’s IP address, the NXC automatically updates the corresponding interface-based, LAN1 subnet address object. So any configuration that uses the LAN1 subnet address object is also updated.

Address objects and address groups are used in dynamic routes, firewall rules, application patrol, content filtering, and VPN connection policies. For example, addresses are used to specify where content restrictions apply in content filtering. Please see the respective sections for more information about how address objects and address groups are used in each one.

Address groups are composed of address objects and address groups. The sequence of members in the address group is not important.

 

177

NXC CLI Reference Guide