8.2. IP Groups

IP groups enable easier definition of packet filter rules. These groups can be used for specification of the Remote entry in the dialog for packet filter rule definition (see above).

IP groups can be viewed and defined in the IP Group tab of the Advanced Packet Filter window.

Packet filter — IP address groups

Figure 8.17. Packet filter — IP address groups

The window consists of the two following columns:

Uncheck an item to disable a rule temporarily. This can be helpful for example when testing or debugging — it is not necessary to remove items and then define them again.

Click on the Add button (or the Edit button to edit a selected item) to open a dialog for IP group definition.

Packet filter — Addition of IP address group

Figure 8.18. Packet filter — Addition of IP address group

Is enabled

Check/uncheck this option to enable/disable the item. This option is identical to the matching field next to the item name in the IP Groups tab (see above). If the Is enabled is unchecked, the item is not active. This means that it is not included in the group.

Group name

Name of the group to which the item will be included. Specify the item by one of the following methods:

  • select a name from the menu — the item will be added to this group

  • enter a new group name — this group will be created automatically and the item will be added to the new group

Type

Type of the new item:

  • Host — IP address of one computer

  • Address range — define First address and Last address to specify IP range

  • Address / mask — subnet defined by an IP address and mask

  • Address group — another IP address group (IP addresses can be embedded into each other)