Tavve zoneranger User Manual page 51

Note that although these examples have used IP addresses, the Proxy Map service can work with IP
addresses, host names, or combinations of both. In addition, the Proxy Map service can be configured
with rg-address values specified as address patterns, or device groups. For example:
•
62.2.37.*
•
62.2.37.[3-7]
•
*.company.com
•
@MyGroup
When NAT is in effect, each entry in the active proxy map must include a zr-address value. In order
for a single address pattern entry to be used for multiple devices, the zr-address must be specified as
an address transform. Using address patterns and address transforms, the active proxy map configuration
for the example network could be reduced to the following:
rg-address
64.1.25.*
64.2.37.[1-3]
64.2.37.[1-3]
The following flow chart illustrates the operation of the algorithm used by the Proxy Map service.
Figure 16-2. Proxy Map algorithm
This algorithm makes use of a number of configuration settings:
•
If the resolve_host_names setting is enabled, the address associated with the target device
at the Ranger Gateway (that is, the rg-address ) is resolved to an IP address before the active
proxy map lookup is performed.
ZoneRanger 5.5 User's Guide
zoneranger zr-address
ZR-1
ZR-2 192.168.1.*
ZR-2 192.168.1.*
51