Creating an IP set

You can create an IP set in a firewall template or on a CPE device. When you create an IP set in a firewall template, the IP set is automatically created on all CPE devices that are using the template.

To create an IP set:

1. Create an IP set in one of the following ways:
   • If you want to create an IP set in a firewall template, go to the SD-WAN → Firewall templates menu section, click the template and in the displayed settings area, select the IP sets tab.
   • If you want to create an IP set on a CPE device, go to the SD-WAN → CPE menu section, click the device, and in the displayed settings area, select the Firewall settings → IP sets tab and select the Override check box.

   A table of IP sets is displayed.

2. Click + IP set.
3. This opens a window; in that window, in the Name field, enter the name of the IP set. Maximum length: 255 characters.
4. In the Direction drop-down list, select whether the IP set is associated with the source or the destination of traffic packets:
   • Match source if the set contains source IP addresses or subnets.
   • Match destination if the set contains destination IP addresses or subnets.
5. In the Type drop-down list, select whether the set contains IP addresses or subnets.
   • Set of subnets if the set contains subnets.
   • Set of IPs if the set contains IP addresses.
6. If in the Type drop-down list, you selected Set of subnets, follow these steps to specify a subnet:
   1. Under Entries list, click + Add.
   2. In the field that is displayed, enter an IPv4 prefix. You can specify ranges of IPv4 prefix components using square brackets, for example, 192.[165-168].2.0/24.

   The subnet is specified and displayed under Entries list. You can specify multiple subnets; to delete a subnet, click the delete icon next to it.

7. If in the Type drop-down list, you selected Set of IPs, follow these steps to specify an IP address:
   1. Under Entries list, click + Add.
   2. In the field that is displayed, enter an IPv4 address. You can specify ranges of IPv4 address components using square brackets, for example, 192.[165-168].2.0.

   The IP address is specified and displayed in the Entries list section. You can specify multiple IP addresses; to delete an IP address, click the delete icon next to it.

8. Click Create.

   The IP set is created and displayed in the table.

9. In the upper part of the settings area, click Save to save the settings of the firewall template or CPE device.