Use the IpAddrGroup statement to define an IP address group. An IpAddrGroup statement identifies a set of IP specifications that make up the IP address group.
Syntax
>>-IpAddrGroup--name--------------------------------------------> >--| Put Braces and Parameters on Separate Lines |------------->< Put Braces and Parameters on Separate Lines |--+-{-------------------------+--------------------------------| | .-----------------------. | | V | | +---+-IpAddr------------+-+-+ | +-IpAddrRef name----+ | | +-IpAddrSet---------+ | | '-IpAddrSetRef name-' | '-}-------------------------'
Parameters
- name
- A string 1 - 32 characters in length specifying the name of this IP address group.
- IpAddr
- An inline specification of an IpAddr statement to be included in this group.
- IpAddrRef
- The name of a globally defined IpAddr statement.
- IpAddrSet
- An inline specification of an IpAddrSet statement to be included in this group.
- IpAddrSetRef
- The name of a globally defined IpAddrSet statement.
- Result for AT-TLS policies:
- When an IpAddrGroup statement contains non-continuous ranges of IP addresses, Policy Agent cannot merge these conditions into a single condition. The group's ranges are displayed by pasearch, as configured, with the summary condition equal to the lowest from value in the group to the highest to value in the group. If an IP address of 0.0.0.0 exists in an IpAddrGroup statement, the summary condition for this attribute is set to All. When an IpAddrGroup statement contains a mixture of IPv4 and IPv6 addresses, a summary condition cannot be created. The group's ranges are displayed by pasearch, as configured, with a summary condition for this attribute of All.
- Result for Routing policies:
- When an IpAddrGroup statement contains non-continuous ranges of IP addresses, Policy Agent cannot merge these conditions into a single condition. The ranges of the group are displayed by pasearch, as configured, with the summary condition equal to the lowest from value in the group to the highest to value in the group. If an IP address of 0.0.0.0 exists in an IpAddrGroup statement, the summary condition for this attribute is set to All. When an IpAddrGroup statement contains a mixture of IPv4 and IPv6 addresses, a summary condition cannot be created. The ranges of the group are displayed by pasearch, as configured, with a summary condition for this attribute of All.
Rule: For IPSec, all addresses defined within this address group must be in the same address family (IPv4 or IPv6).