Chapter 7 Firewall : Building firewall objects and policies : IPv4 Address Group
  
IPv4 Address Group
Your company has a small division that is in Denmark that has a number of remote users that need to connect to a resource from either home, office or customer sites. The thing that they have in common is that there are all in Denmark. An address group needs to be created that will allow for this.
The preconfigured addresses to use will consist of:
Denmark - a geography based address
Denmark_ISP1 - a IP range of address of an ISP that services Denmark
Denmark_ISP2 - a IP range of address of another ISP that services Denmark
Denmark_Division - the FQDN of the Denmark office that uses Dynamic DNS
Go to Policy & Objects> Objects > Addresses and select Create New > Address Group.
Fill out the fields with the following information
Type
IPv4 Group
Group Name
Denmark_Users
Show in Address List
<enable>
Members
Denmark
Denmark_ISP1
Denmark_ISP2
Denmark_Division
Comments
<Input into this field is optional>
Select OK.
Enter the following CLI command:
config firewall addrgrp
edit Denmark_Users
set member Denmark Denmark_ISP1 Denmark_ISP2 Denmark_Division
end
 
If you need to edit out a member of an address group in the CLI you need to
To verify that the addresses were added correctly:
Go to Policy & Objects> Objects > Addresses. Check that the addresses have been added to the address list and that they are correct.
Enter the following CLI command:
config firewall addgrp
edit <the name of the address that you wish to verify>
Show full-configuration