Chapter 12: Node Groups - Tavve zoneranger User Manual

Chapter 12: Node Groups

There are many configuration areas in ZoneRanger which accept a list of IP addresses and/or address
patterns. The same list of devices may need to be applied to multiple configuration areas. Node Groups
represent a collection of address patterns that can be applied to the following IP address based
configurations:
• Forwarding rules
• TACACS+/RADIUS proxy rules
• Inbound TCP proxy rules
• Outbound ICMP proxy caching
• IP Interface polling
• SNMP Manager rules
• SNMP Disallowed lists.
Node Groups are maintained on the Configuration > Node Management page Node Groups tab of the
ZoneRanger Web GUI. Node Groups may contain any number of valid address patterns as well as other
Node Groups. When specifying a Node Group in a configuration rule or within another Node Group,
the name of the Node Group must be prefixed with '@' to indicate that the value should be interpreted as
a Node Group. For example, the Node Group "webservers" would be represented as @webservers. It
may represent the following:
10.254.1.[1-5]
10.10.23.25
@otherwebservers
Note that Node Groups do not contain hostnames.
ZoneRanger 5.5 User's Guide 36