. . . . .
P O L I C Y C O N F I G U R A T I O N
Configuring Address Objects
Version 3R2
Security Appliance User Guide
9-15
get address {zone} name {adr_obj}
CREATING ADDRESS GROUPS
Address groups include multiple address objects. Use the
set group
command with the
address
option to create an address group:
set group address {zone} {grp_name}
ADDING OBJECTS TO AN ADDRESS GROUP
Use the
set group
command with the address and
add
options to add
an address object to an address group:
set group address {zone} {grp_name} add {adr_obj}
The following limitations apply to address groups:
• Address groups cannot have the same name as an address object.
• If the policy database references an address group, you cannot delete
the address group until you first remove it from the policy database.
• One address group cannot have another address group as a member.
E X A M P L E : C R E A T I N G A N A D D R E S S G R O U P
Figure 9-5: Address Groups
To create the address objects and address group in
Figure 9-5
, follow
these steps:
set address trust Finance_Subnet 10.0.1.0/24
set address trust Mktg_Subnet 10.0.2.0/24
set address trust Sales_Subnet 10.0.3.0/24
set group address trust New_York_Office
