Network Objects

Network Objects is a method used to abstractly define a set of LAN hosts, according to one or more MAC address, IP address, and host name. Defining such a group can assist when configuring system rules. For example, network objects can be used when configuring OpenRG's security filtering settings such as IP address filtering, host name filtering or MAC address filtering.

You can use network objects in order to apply security rules based on host names instead of IP addresses. This may be useful, since IP addresses change from time to time. Moreover, it is possible to define network objects according to MAC addresses, making rule application more persistent against network configuration settings.

To define a network object:

1. Click the 'Network Objects' icon in the 'Advanced' screen of the Web-based Management. The 'Network Objects' screen will appear (see figure 11.54).

   Figure 11.54: Network Objects

   
2. Click the 'New Entry' link, the 'Edit Network Object' screen will appear (see figure 11.55).

   Figure 11.55: Edit Network Object

   
3. Name the network object in the Description field, and click New Entry to actually create it. The 'Edit Item' screen will appear (see figure 11.56). The source address can be entered in one of the following methods:
   • IP Address
   • IP Subnet
   • IP Range
   • MAC Address
   • Host Name
   When selecting a method from the combo box, the screen will refresh, presenting the respective fields by which to enter the relevant information.

   Figure 11.56: Edit Item

   
4. Select a method and enter the source address accordingly.
5. Click 'OK' to save the settings.