R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

26
Address resource configuration
NOTE:
The firewall supports address resource configuration only in the web interface.
Address resource overview
Address resources are classified into four categories: IP address resource, IP address group resource,
MAC address resource, and MAC address group resource. They can be referenced by inter-zone policies
to define packet match criteria.
1. An IP address resource is a collection of domain names or IP address resources and falls into the
following types:
• Host address resource—A domain name, or one or more individual IP addresses
• Address range resource—A range of IP addresses defined by a start IP address and an end IP
address. Some individual addresses, if necessary, can be excluded from the range.
• Subnet address resource—A subnet IP address defined by an IP address and a wildcard. Some
individual addresses, if necessary, can be excluded from the range.
2. An IP address group resource is a collection of host address resources, address range resources,
and subnet address resources.
3. An MAC address resource is a collection of MAC addresses.
4. An MAC address group sources is a collection of MAC address resources.
Configuring an address resource
Configuring a host address resource
Select Resource > Address > IP Address from the navigation tree to enter the host address resource list
page, as shown in Figure 16. T
hen, click Add to enter the host address resource configuration page, as
shown in Figure 17.
Figure 16 Host address
resource list