User's Manual

UTT Technologies Chapter 12 Security
http://www.uttglobal.com Page 349
12.6 Address Group
This section describes the Security > Address Group page.
12.6.1 Introduction to Address Group
An address group can contain up to ten address members. A member may be an address
range or address group. And an address group may contain address ranges only, or
address groups only, or both.
If you want to create an access control rule (in the Security > Firewall page) whose
destination or source IP addresses are discontinuous, you can create an address group
for them in this page firstly, and then reference it in the access control rule. When
receiving a packet, if the packet¶s destination or source IP address belongs to the address
group, the Device will consider that its IP address matches the access control rule. And if
the packet also matches other criteria (
protocol type, destination ports, schedule, etc.) of the
access control rule, the Device will consider that the packet matches the access control
rule.
Using address groups can facilitate the configuration of access control rules. For example,
if some LAN hosts¶ IP addresses are discontinuous, but the hosts have the same
privileges of accessing the Internet, you can create an address group for these hosts.
Then you only need to create one access control rule by using the address group to meet
the KRVWV¶ requirements. Else you need to create multiple access control rules for these
hosts.
Similarly, you also can reference an address group in a rule limit rule in the QoS > Rate
Limit Rule page.