Step Description Command Keys
esr(config-object-group-network)#
ip address-range
<FROM-ADDR>-<TO-ADDR>
<FROM-ADDR> – range starting
IP address;
<TO-ADDR> – range ending IP
address, optional parameter; If
the parameter is not specified,
a single IP address is set by the
command.
The addresses are defined as
AAA.BBB.CCC.DDD where each
part takes values of [0..255].
esr(config-object-group-network)#
ipv6 prefix <IPV6-ADDR/LEN>
<IPV6-ADDR/LEN> – IP
address and mask of a subnet,
defined as X:X:X:X::X/EE where
each X part takes values in
hexadecimal format [0..FFFF]
and EE takes values of [1..128].
esr(config-object-group-network)#
ipv6 address-range
<FROM-ADDR>-<TO-ADDR>
<FROM-ADDR> – range starting
IPv6 address;
<TO-ADDR> – range ending
IPv6 address, optional
parameter. If the parameter is
not specified, a single IPv6
address is set by the
command.
The addresses are defined as
X:X:X:X::X where each part
takes values in hexadecimal
format [0..FFFF].
22 Create services lists which will be used
during filtration.
esr(config)# object-group service
<obj-group-name>
<obj-group-name> – service
profile name, set by the string
of up to 31 characters.
23 Specify services list description
(optional).
esr(config-object-group-service)#
description <description>
<description> – profile
description, set by the string of
up to 255 characters.
24 Add necessary services (tcp/udp ports)
to the list.
esr(config-object-group-service)#
port-range <port>
<port> – takes values in the
range of [1..65535].
You can specify several ports
separated by commas “,” or
you can specify the range of
ports with “-”.