Configuration Object Groups - D-Link DFL-260E User Manual

Network security firewall netdefendos version 2.27.03
Hide thumbs Also See for DFL-260E:
Table of Contents

Advertisement

3.5.6. Configuration Object Groups

Configuration changes must be saved by then issuing an activate followed by a commit command.
Web Interface
1.
Go to Rules > IP Rules > Add > IPRule
2.
Specify a suitable name for the rule, for example LAN_HTTP
3.
Now enter:
Name: A suitable name for the rule. For example lan_http
Action: Allow
Service: http
Source Interface: lan
Source Network: lannet
Destination Interface: wan
Destination Network: all-nets
4.
Click OK
3.5.6. Configuration Object Groups
The concept of folders can be used to organise groups of NetDefendOS objects into related
collections. These work much like the folders concept found in a computer's file system. Folders are
described in relation to the address book in Section 3.1.6, "Address Book Folders" and can also be
used when organizing IP rules.
A compliment or alternative to folders for organizing different type of NetDefendOS object lists is
the configuration object groups feature. Object groups gather together configuration objects under a
specified title text for the purpose of organizing their display in graphical user interfaces. Unlike
folders, they do not require the folder to be opened for the individual objects to become visible.
Instead, all objects are already visible and they are displayed in a way that indicates how they are
grouped together.
Groups can be used in most cases where NetDefendOS objects are displayed as tables, where each
line in the table is an instance of an object. The most common usage will be for the NetDefendOS
Address Book to arrange IP addresses and in particular for organizing rules in IP rule sets which is
why they are introduced in this section.
Object Groups and the CLI
The display function of object groups means they do not have relevance to the command line
interface (CLI). It is not possible to define or otherwise modify object groups with the CLI and they
will not be displayed in CLI output. Any group editing must be done through the Web Interface and
this is described next.
Tip: Object groups help to document configurations
Object groups are a recommended way to document the contents of NetDefendOS
configurations.
This can be very useful for someone seeing a configuration for the first time, such as
technical support staff. In an IP rule set that contains hundreds of rules it can often
prove difficult to quickly identify those rules associated with a specific aspect of
NetDefendOS operation.
127
Chapter 3. Fundamentals

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents