IP sets
An IP set represents a collection of network addresses that create one logical group of IP addresses, which is useful when you reuse the same set of addresses in multiple rules. Each address in a given group is assigned similar rules defined centrally for the whole group. One example of such a group is a Trusted zone. Trusted zone represents a group of network addresses that the Firewall does not block in any way. Pre-defined IP sets cannot be removed.
When you add or edit an IP set, the following fields are available:
•Name—Name of a group of remote computers.
•Description—A general description of the group.
•Remote computer address (IPv4, IPv6, range, mask)—A remote address, address range or subnet.
•Delete—Removes a zone from the list.
|
Add IPv4 address: Single address—Adds an IP address of an individual computer (for example, 192.168.0.10). Address range—Type the starting and ending IP addresses to specify the IP range of several computers (for example, 192.168.0.1-192.168.0.99). Subnet—Subnet (a group of computers) defined by an IP address and mask. For example, 255.255.255.0 is the network mask for the 192.168.1.0 subnet. To exclude the whole subnet type in 192.168.1.0/24. Add IPv6 address: Single address—Adds the IP address of an individual computer (for example, 2001:718:1c01:16:214:22ff:fec9:ca5). Subnet—Subnet (a group of computers) is defined by an IP address and mask (for example, 2002:c0a8:6301:1::1/64). |
