Viewing Address Objects; Creating Address Objects - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Viewing Address Objects

Creating Address Objects

Copyright © 2010, Juniper Networks, Inc.
In the navigation tree, click Object Manager > Address Objects to view all address objects
for the current domain. You can display Address objects in a tree or table format:
The Address Tree tab displays address objects in a tree format. To view the members
of an address object group, click the group to display a member list.
The Address Table tab displays address objects in a table format with the following
columns:
Name—Name of the address object
Type—Type of the address object (Host, Network, Group)
IP/Domain Name—The IP address or host name (such as
address object
Netmask—Netmask of the address object
Comment—A description of the address object
When you initially deploy the NSM system and open the UI for the first time, the Address
Object tree and table tabs are empty. Using the Object Manager, you can create address
objects that represent network components that are unique to your network. As you add
address objects, they appear in the tree and table tabs.
You can create the following address objects:
Host—Represents devices, such as workstations or servers, connected to your network.
Network—Represents divisions or subnetworks in your network.
Address Object Group—Represents multiple address objects.
Multicast Group—Represents the destination of multicast packets.
NSM supports the IPv6 protocol in configuring policy rule bases, IDP, address, and attack
objects for devices running ScreenOS 6.3 and later versions, and Junos OS Release 10.2
and later versions.
The following restrictions apply when using IPv6 while configuring objects:
Address groups cannot contain both IPv4 and IPv6 addresses.
The wildcard mask option is not supported for IPv6 addresses.
Rules cannot contain a combination of IPv4 and IPv6 addresses.
IPv4 addresses cannot be copied to IPv6 rules and vice versa.
During a device update, an IPv6 policy rule is dropped if the target platform does not
support IPv6.
The following sections detail each address object type.
Chapter 8: Configuring Objects
www.juniper.net ) of the
323