Configuring IPv4 addresses

You create address objects to identify IPv4 addresses and subnets that you want to match in the following policy rulebases:

• Global ACL

• Do Not Track

Before you begin:

• You must have Read-Write permission for Global Settings.

To configure IPv4 addresses:

1. Go to Global Settings > Address > Address Config.

2. Click Add to display the configuration editor.

3. Complete the configuration as described in Table 21.

4. Save the configuration.

Table 21: IPv4 address configuration
Settings	Guidelines
Name	Configuration name. Must not contain spaces.
Type	• IP address—Create an entry for an individual IP address. • IP netmask—Create an entry for a subnet using an IP address/mask notation. Note: In the Global ACL for IPv4 addresses, you can add “deny rules” based on specified IP addresses or IP netmask configuration objects; you can add “allow rules” based on IP address configuration objects only.
Address	Specify an IP address or an address/mask pattern using CIDR notation.


	To configure with the CLI, use a command sequence similar to the following: config ddos global address edit <address_name> set type {ip-netmask \| ip-address} set ip-netmask <address_ipv4mask> set ip-address <address_ipv4> end

Configuring IPv6 addresses

You create address objects to identify IPv6 addresses and subnets that you want to match in the following policy rulebases:

• Global ACL

• Do Not Track

Before you begin:

• You must have Read-Write permission for Global Settings.

To configure IPv6 addresses:

1. Go to Global Settings > Address > Address Config IPv6.

2. Click Add to display the configuration editor.

3. Complete the configuration as described in Table 22.

4. Save the configuration.

Table 22: IPv6 address configuration
Settings	Guidelines
Name	Configuration name. Must not contain spaces.
Type	• IPv6 Address—Create an entry for an individual IP address. • IPv6 Prefix—Create an entry for a subnet using an IPv6 address/prefix notation. Note: The restriction noted for the Global ACL for IPv4 addresses does not apply. In the Global ACL for IPv6 addresses, you can add “deny rules” or “allow rules” based on either IPv6 address IPv6 Prefix objects.
Address	Specify an IPv6 address. The address must fall within an address space specified by the IPv6 prefix set in global settings.
Prefix	Specify an IPv6 prefix using an IP address/prefix notation. The prefix must be consistent with the IPv6 prefix set in global settings.


	To configure with the CLI, use a command sequence similar to the following: config ddos global address-v6 edit <address_name> set type {ipv6-network \| ipv6-address} set ipv6-network <address_ipv6mask> set ipv6-address <address_ipv6> end