resources group address-group <group-name>
Defines a group of IP addresses that are referenced in firewall rules.
- address-group
- A group of IPv4 addresses or address ranges.
- group-name
- The name of a firewall address group.
- address address
- Adds the specified IPv4 address or range of IPv4 addresses to the specified firewall address group. IPv4 address ranges are specified by separating two contiguous IPv4 addresses with a hyphen, for example, 10.0.0.1-10.0.0.50. The maximum number of addresses that you can add to an address group is 1024.
- description desc
- Provides a brief description for the firewall address group.
Configuration mode
resources {
group {
address-group group-name {
address address
description desc
}
}
}Use this command to specify an address group. A firewall address group is a collection of host IP addresses and address ranges that, once defined, can be collectively referenced within a firewall command.
A firewall address group is considered matched if the packet address matches any address or address range within the group.
Use the set form of this command to specify the address group.
Use the delete form of this command to remove a firewall address group or its members.
Use the show form of this command to view the configuration of a firewall address group.