User's Manual

NXC CLI Reference Guide
177
CHAPTER 25
Addresses
This chapter describes how to set up addresses and address groups for the NXC.
 Use the configure terminal command to enter Configuration mode in
order to use the commands described in this chapter.
25.1 Address Overview
Address objects can represent a single IP address or a range of IP addresses. Address groups
are composed of address objects and other address groups.
You can create IP address objects based on an interface’s IP address, subnet, or gateway. The
NXC automatically updates these objects whenever the interface’s IP address settings change.
This way every rule or setting that uses the object uses the updated IP address settings. For
example, if you change the LAN1 interface’s IP address, the NXC automatically updates the
corresponding interface-based, LAN1 subnet address object. So any configuration that uses
the LAN1 subnet address object is also updated.
Address objects and address groups are used in dynamic routes, firewall rules, application
patrol, content filtering, and VPN connection policies. For example, addresses are used to
specify where content restrictions apply in content filtering. Please see the respective sections
for more information about how address objects and address groups are used in each one.
Address groups are composed of address objects and address groups. The sequence of
members in the address group is not important.