Use
the IpAddrGroup statement to define an IP address group. An IpAddrGroup
statement identifies a set of IP specifications that make up the IP
address group.
Syntax
>>-IpAddrGroup--name-------------------------------------------->
>--| Put Braces and Parameters on Separate Lines |-------------><
Put Braces and Parameters on Separate Lines
|--+-{-------------------------+--------------------------------|
| .-----------------------. |
| V | |
+---+-IpAddr------------+-+-+
| +-IpAddrRef name----+ |
| +-IpAddrSet---------+ |
| '-IpAddrSetRef name-' |
'-}-------------------------'
Parameters
- name
- A string 1 - 32 characters in length specifying the name of this
IP address group.
- IpAddr
- An inline specification of an IpAddr statement to be included
in this group.
- IpAddrRef
- The name of a globally defined IpAddr statement.
- IpAddrSet
- An inline specification of an IpAddrSet statement to be included
in this group.
- IpAddrSetRef
- The name of a globally defined IpAddrSet statement.
- Result for AT-TLS policies:
- When an IpAddrGroup statement contains non-continuous ranges of
IP addresses, Policy Agent cannot merge these conditions into a single
condition. The group's ranges are displayed by pasearch,
as configured, with the summary condition equal to the lowest from value
in the group to the highest to value in
the group. If an IP address of 0.0.0.0 exists in an IpAddrGroup statement,
the summary condition for this attribute is set to All.
When an IpAddrGroup statement contains a mixture of IPv4 and IPv6
addresses, a summary condition cannot be created. The group's ranges
are displayed by pasearch, as configured,
with a summary condition for this attribute of All.
- Result for Routing policies:
- When an IpAddrGroup statement contains non-continuous ranges of
IP addresses, Policy Agent cannot merge these conditions into a single
condition. The ranges of the group are displayed by pasearch,
as configured, with the summary condition equal to the lowest from value
in the group to the highest to value in
the group. If an IP address of 0.0.0.0 exists in an IpAddrGroup statement,
the summary condition for this attribute is set to All.
When an IpAddrGroup statement contains a mixture of IPv4 and IPv6
addresses, a summary condition cannot be created. The ranges of the
group are displayed by pasearch, as configured,
with a summary condition for this attribute of All.
Rule: For IPSec, all addresses defined within
this address group must be in the same address family (IPv4 or IPv6).