ZyXEL Communications Security Camera 3.1 ユーザーズマニュアル
ZyWALL (ZLD) CLI Reference Guide
237
C
H A P T E R
2 7
Addresses
This chapter describes how to set up addresses and address groups for the ZyWALL.
27.1 Address Overview
Address objects can represent a single IP address or a range of IP addresses. Address groups are
composed of address objects and other address groups.
composed of address objects and other address groups.
You can create IP address objects based on an interface’s IP address, subnet, or gateway. The
ZyWALL automatically updates these objects whenever the interface’s IP address settings change.
This way every rule or setting that uses the object uses the updated IP address settings. For
example, if you change the LAN1 interface’s IP address, the ZyWALL automatically updates the
corresponding interface-based, LAN1 subnet address object. So any configuration that uses the
LAN1 subnet address object is also updated.
ZyWALL automatically updates these objects whenever the interface’s IP address settings change.
This way every rule or setting that uses the object uses the updated IP address settings. For
example, if you change the LAN1 interface’s IP address, the ZyWALL automatically updates the
corresponding interface-based, LAN1 subnet address object. So any configuration that uses the
LAN1 subnet address object is also updated.
Address objects and address groups are used in dynamic routes, firewall rules, application patrol,
content filtering, and VPN connection policies. For example, addresses are used to specify where
content restrictions apply in content filtering. Please see the respective sections for more
information about how address objects and address groups are used in each one.
content filtering, and VPN connection policies. For example, addresses are used to specify where
content restrictions apply in content filtering. Please see the respective sections for more
information about how address objects and address groups are used in each one.
Address groups are composed of address objects and address groups. The sequence of members in
the address group is not important.
the address group is not important.
27.2 Address Commands Summary
The following table describes the values required for many address object and address group
commands. Other values are discussed with the corresponding commands.
commands. Other values are discussed with the corresponding commands.
Table 139
Input Values for Address Commands
LABEL
DESCRIPTION
object_name
The name of the address. You may use 1-31 alphanumeric characters, underscores(
_
), or
dashes (-), but the first character cannot be a number. This value is case-sensitive.
group_name
The name of the address group. You may use 1-31 alphanumeric characters,
underscores(
underscores(
_
), or dashes (-), but the first character cannot be a number. This value is
case-sensitive.
interface_name
The name of the interface. This depends on the ZyWALL model.
For the USG 300 and above, use gex, x = 1 ~ N, where N equals the highest numbered
Ethernet interface for your ZyWALL model.
Ethernet interface for your ZyWALL model.
For the ZyWALL USG 200 and below, use a name such as wan1, wan2, opt, lan1, ext-wlan,
or dmz.
or dmz.