Freedom9 freeGuard Slim 100, Руководство пользователя

Страница: 96 / 170

A D V A N C E D P O L I C Y C O N F I G U R A T I O N
6
6-12
User Guide
set group address {zone} {grp_name} add {adr_obj}
The following limitations apply to address groups:
• Address groups cannot have the same name as an address object.
• If the policy database references an address group, you cannot delete the address group
until you first remove it from the policy database.
• One address group cannot have another address group as a member.
Example: Creating an Address Group
Figure 6-5 Address Groups
To create the address objects and address group in Figure 6-5 , follow these steps:
set address trust Finance_Subnet 10.0.1.0/24
set address trust Mktg_Subnet 10.0.2.0/24
set address trust Sales_Subnet 10.0.3.0/24
set group address trust New_York_Office
set group address trust New_York_Office add Finance_Subnet
set group address trust New_York_Office add Mktg_Subnet
set group address trust New_York_Office add Sales_Subnet
save
GUI Example: Creating an Address Group
1.
Select Objects > Add Address Object.
2.
Enter the following, then click Apply :
Name: Finance_Subnet
IP Address/Netmask: 10.0.1.0/24
Zone: Trust
3.
Select Objects > Add Address Object.
4.
Enter the following, then click Apply :
Name: Mktg_Subnet
IP Address/Netmask: 10.0.2.0/24
Zone: Trust