Modify Networks

Modify Networks

You can view active networks, as well as configure new ones. You can define networks that are used by the device (active) and you can define networks that are kept in a separate database until they are required (inactive).

You can add, modify and delete these networks according to your requirements.

A network class is identified by a name and defined by a network address and mask, or by a range of IP addresses (from-to). For example, network net1 can be 10.0.0.0/255.0.0.0 and network net2 can be from 10.1.1.1 to 10.1.1.7; alternatively, network net1 can be 1234::0/32 and network net2 can be from 1234::0 to 1234:FFFF:FFFF:FFFF. The Network list allows either configuration.

Using classes allows you to define a network comprised of multiple subnets and/or IP ranges, all identified with the same class name. For example, network net1 can be 10.0.0.0/255.255.255.0 and 10.1.1.1 to 10.1.1.7.

You can use network classes in the following:

  • Black lists

  • White lists

  • Network-protection policies  to match source or destination traffic

  • Bandwidth management rules

To configure a network class

  1. Select Classes > Modify Networks.

  2. Do one of the following:

  1. To add an entry, click Create.

  2. To edit an entry, click the entry link in the table.

  1. Configure the parameters, and click Set.

 

Parameter

Description

Name

The name of the network class.

The network name is case-sensitive.

The network name cannot be an IP address.

Sub Index

When you define multiple network classes with the same name, you must assign each instance a different sub-index number. The numbers do not need to be sequential or in order.

Address

(For an IP Mask entry only)

The network address.

Mask

(For an IP Mask entry only)

The mask of the subnet, which you can enter in either of the following ways:

  • A subnet mask in dotted decimal notation—for example, 255.0.0.0 or 255.255.0.0.

  • An IP prefix, that is, the number of mask bits—for example, 8 or 16.

From IP

(For an IP Range entry only)

The first IP address in the range.

To IP

(For an IP Range entry only)

The last IP address in the range.

Mode

Whether the network is defined by a subnet and mask, or by an IP range.

Values: IP Mask, IP Range