Table of ContentsPreviousNextIndex

SonicWALL, Inc.

Network/Address_Objects.htm

Network > Address Objects

Address Objects are one of four object classes (Address, User, Service, and Schedule) in SonicOS Enhanced. These Address Objects allow for entities to be defined one time, and to be re-used in multiple referential instances throughout the SonicOS interface. For example, take an internal Web-Server with an IP address of 67.115.118.80. Rather than repeatedly typing in the IP address when constructing Access Rules or NAT Policies, Address Objects allow you to create a single entity called "My Web Server" as a Host Address Object with an IP address of 67.115.118.80. This Address Object, "My Web Server" can then be easily and efficiently selected from a drop-down menu in any configuration screen that employs Address Objects as a defining criterion.

Types of Address Objects

Since there are multiple types of network address expressions, there are currently the following Address Objects types:

Address Object Groups

SonicOS Enhanced has the ability to group Address Objects into Address Object Groups. Groups of Address Objects can be defined to introduce further referential efficiencies. Groups can comprise any combination of Host, Range, or Network Address Objects. MAC Address Objects should be grouped separately, although they can safely be added to Groups of IP-based Address Objects, where they will be ignored when their reference is contextually irrelevant (e.g. in a NAT Policy). For example "My Public Group" can contain Host Address Object "My Web Server" and Range Address Object "My Public Servers", effectively representing IP Addresses 67.115.118.66 to 67.115.118.90 and IP Address 67.115.118.110.

Creating and Managing Address Objects

The Network > Address Objects page allows you to create and manage your Address Objects.

You can view Address Objects in the following ways using the View Style menu:

Sorting Address Objects allows you to quickly and easily locate Address Objects configured on the SonicWALL security appliance.

Note: An Address Object must be defined before configuring NAT Policies, Access Rules, and Services.

Navigating and Sorting the Address Objects and Address Groups Entries

The Address Objects and Address Groups tables provides easy pagination for viewing a large number of address objects and groups. You can navigate a large number of entries listed in the Address Objects or Address Groups tables by using the navigation control bar located at the top right of the tables. Navigation control bar includes four buttons. The far left button displays the first page of the table. The far right button displays the last page. The inside left and right arrow buttons moved the previous or next page respectively.

You can enter the policy number (the number listed before the policy name in the # Name column) in the Items field to move to a specific entry. The default table configuration displays 50 entries per page. You can change this default number of entries for tables on the System > Administration page.

You can sort the entries in the table by clicking on the column header. The entries are sorted by ascending or descending order. The arrow to the right of the column entry indicates the sorting status. A down arrow means ascending order. An up arrow indicates a descending order.

Default Address Objects and Groups

The Default Address Objects view displays the default Address Objects and Address Groups for your SonicWALL security appliance. The Default Address Objects entries cannot be modified or deleted. Therefore, the Notepad (Edit) and Trashcan (delete) icons are dimmed. The following lists the default Address Objects and Address Groups for the TZ 170 SP Wireless.

SonicWALL PRO 5060

Default Address Objects

Default Address Groups

SonicWALL PRO 4060

Default Address Objects

Default Address Groups

SonicWALL PRO 3060

Default Address Objects

Default Address Groups

SonicWALL PRO 2040

Default Address Objects

Default Address Groups

SonicWALL TZ 170 Series

Default Address Objects

Default Address Groups

Adding an Address Object

To add an Address Object, click Add button under the Address Objects table in the All Address Objects or Custom Address Objects views to display the Add Address Object window.

  1. Enter a name for the Network Object in the Name field.
  2. Select Host or Range or Network from the Type menu.
  3. If you select Host, enter the IP address and netmask in the IP Address and Netmask fields.
  4. If you selected Range, enter the starting and ending IP addresses in the Starting IP Address and Ending IP Address fields.
  5. If you selected Network, enter the network IP address and netmask in the Network and Netmask fields.
  6. Select the zone to assign to the Address Object from the Zone Assignment menu. You can choose LAN, WAN, DMZ, or VPN.

Editing or Deleting an Address Object

To edit an Address Object, click the edit icon in the Configure column in the Address Objects table. The Edit Address Object window is displayed, which has the same settings as the Add Address Object window.

To delete an Address Object, click the Delete icon in the Configure column for the Address Object you want to delete. A dialog box is displayed asking you to confirm the deletion. Click OK to delete the Address Object. To delete multiple active Address Objects, select them and click the Delete button.

Creating Group Address Objects

As more and more Address Objects are added to the SonicWALL security appliance, you can simplify managing the addresses and access policies by creating groups of addresses. Changes made to the group are applied to each address in the group.

To add a Group of Address Objects, click Add Group to display the Add Address Object Group window.

  1. Create a name for the group in the Name field.
  2. Select the Address Object from the list and click the right arrow. It is added to the group. Clicking while pressing the Ctrl key allows you to select multiple objects.
  3. Click OK.
    4. Tip: To remove an address or subnet from the group, select the IP address or subnet in the right column and click the left arrow. The selected item moves from the right column to the left column.

Editing or Deleting Address Groups

To edit a group, click the edit icon in the Configure column of the Address Groups table. The Edit Address Object Group window is displayed. Make your changes and then click OK.

To delete a group, click on the Delete icon in the Configure column to delete an individual Address Group. A dialog box is displayed asking you to confirm the deletion. Click OK to delete the Address Group. To delete multiple active Address Groups, select them and click the Delete button.

Public Server Wizard

SonicOS Enhanced includes the Public Server Wizard to automate the process of configuring the SonicWALL security appliance for handling public servers. For example, if you have an e-mail and Web servers on your network for access from users on the Internet.

The Public Server Wizard allows you to select or define the server type (HTTP, FTP, Mail), the private (external) address objects, and the public (internal) address objects. Once the server type, private and public network objects are configured, the wizard creates the correct NAT Policies and Access Rule entries on the security appliance for the server. You can use the SonicWALL Management Interface for additional configuration options.

Cross Reference:  See Part 14, Wizards for more information on configuring the SonicWALL security appliance using wizards.

www.SonicWALL.com
SonicWALL, Inc.
http://www.sonicwall.com
1160 Bordeaux Drive
Sunnyvale, CA 94089-1209
Table of ContentsPreviousNextIndex