D-Link DFL-860 Product Manual - Page 122
Configuration Object Groups, Object Groups and the CLI, A Simple Example
UPC - 790069900204
View all D-Link DFL-860 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 122 highlights
3.5.6. Configuration Object Groups Chapter 3. Fundamentals • Source Interface: lan • Source Network: lannet • Destination Interface: wan • Destination Network: all-nets 4. Click OK 3.5.6. Configuration Object Groups The concept of folders can be used to organise groups of NetDefendOS objects into related collections. These work much like the folders concept found in a computer's file system. Folders are described in relation to the address book in Section 3.1.6, "Address Book Folders" and can also be used when organizing IP rules. A compliment or alternative to folders for organizing different type of NetDefendOS object lists is the configuration object groups feature. Object groups gather together configuration objects under a specified title text for the purpose of organizing their display in graphical user interfaces. Unlike folders, they do not require the folder to be opened for the individual objects to become visible. Instead, all objects are already visible and they are displayed in a way that indicates how they are grouped together. Groups can be used in most cases where NetDefendOS objects are displayed as tables, where each line in the table is an instance of an object. The most common usage will be for the NetDefendOS Address Book to arrange IP addresses and in particular for organizing rules in IP rule sets which is why they are introduced in this section. Tip: Object groups help to document configurations Object groups are a recommended way to document the contents of NetDefendOS configurations. This can be very useful for someone seeing a configuration for the first time, such as technical support staff. In an IP rule set that contains hundreds of rules it can often prove difficult to quickly identify those rules associated with a specific aspect of NetDefendOS operation. Object Groups and the CLI The display function of object groups means they do not have relevance to the command line interface (CLI). It is not possible to define or otherwise modify object groups with the CLI and they will not be displayed in CLI output. Any group editing must be done through the Web Interface and this is described next. A Simple Example As an example, consider the IP rule set main which contains just two rules to allow web surfing from an internal network and a third Drop-all rule to catch any other traffic so that it can be logged: 122