Tavve zoneranger User Manual page 24

In addition to user-defined device groups, there are two special device groups that are defined
automatically:
•
The Local device group consists of all addresses that are local to the Ranger Gateway server.
•
The ZoneRanger device group consists of the IP addresses of all joined ZoneRangers
Using these device groups, in the network shown above, if we wanted to only allow proxy requests
originating from the Ranger Gateway server, the Proxy Access Control rules above could be rewritten
as:
•
@Local @MyRouters portConfig-1
•
@Local @MyServers portConfig-2
•
@Local @ZoneRanger portConfig-3
Device groups can also contain device groups. For example, we could define a new group called
MyRoutersAndServers
MyRoutersAndServers: @MyRouters, @MyServers
Once a device group is defined, and configuration settings have been associated with it, those settings
can be applied to a new device by simply adding that device to the group. Similarly, a device that is
included in a configured device group can be reverted back to default settings by simply removing that
device from the group.
2 As a convenience, the ZoneRanger device group also includes any IP addresses that map to a joined
ZoneRanger based on the Proxy Map configuration.
ZoneRanger 5.5 User's Guide
as follows:
2 .
24