D-Link NetDefendOS User Manual page 640

Web Interface
Create the IP4Address object that specifies the IP range of connecting clients with the
authentication group client_group:
1. Go to: Objects > Address Book > Add > IP4 Address
2. Now enter:
• Name: client_net
• IP Address: 192.168.10.10-192.168.10.255
• User Authentication: client_group
3. Click OK
Create the IP Rule object that grants access to the networks on the interface If2 using the address
object created above as the source network:
1. Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2. Specify a suitable name for the rule, for example LAN_HTTP
3. Now enter:
• Name: client_access_rule
• Action: Allow
• Service: all_services
• Source Interface: If1
• Source Network: client_net
• Destination Interface: If2
• Destination Network: all-nets
4. Click OK
Note: Authentication address objects have only one use
IP address objects that are used for authentication with the authentication property set
can only be used as the source network or destination network of an IP rule or IP policy.
They cannot be used for other purposes. This will be reflected in the IP address lists
presented by the Web Interface and the tab completion choices provided by the CLI.
640
Chapter 8: User Authentication