Dell PowerConnect W-7200 Series, Reference Manual

Page: 446 / 1538

446 | netdestination Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
netdestination
netdestination <name>
description <description6>
host <ipaddr> [position <number>]
invert
name
network <ipaddr> <netmask> [position <number>]
no ...
range <start-ipaddr> <end-ipaddr> [position <number>]
Description
This command configures an alias for an IPv4 network host, subnetwork, or range of addresses.
Syntax
Parameter Description
<name>
Name for this host or domain. Maximum length is 63 characters.
description Description about the this destination up to 128 characters long.
host
Configures a single IPv4 host and its position in the list.
invert
Specifies that the inverse of the network addresses configured are used. For example, if a network
of 172.16.0.0 255.255.0.0 is configured, this parameter specifies that the alias matches everything
except this subnetwork.
network
An IPv4 subnetwork consisting of an IP address and netmask.
no
Negates any configured parameter.
range
A range of IPv4 addresses consisting of sequential addresses between a lower and an upper
value. The maximum number of addresses in the range is 16. If larger ranges are needed, convert
the range into a subnetwork and use the network parameter.
Usage
Aliases can simplify configuration of session ACLs, as you can use an alias when specifying the traffic source and/or
destination it in multiple session ACLs. Once you configure an alias, you can use it to manage network and host
destinations from a central configuration point, because all policies that reference the alias will be updated
automatically when you change the alias.
When using the invert option, use caution when defining multiple aliases, as entries are processed one at a time. As
an example, consider a netdestination configured with the following two network hosts:
netdestination dest1 invert
network 1.0.0.0 255.0.0.0
network 2.0.0.0 255.0.0.0
A frame from http://1.0.0.1 would match the first alias entry, (which allows everything except for 1.0.0.0/8) so the
frame would be rejected. However, it would then be compared against the second alias, which allows everything
except for 2.0.0.0/8, and the frame would be permitted.