Configuring IP addresses

This section is located at the libraries ip-list level.

To create an IP address group, use the following command:

Admin@nodename# create libraries ip-list <parameter>

Provide the following parameters:

Parameter

Description

name

Address list name.

description

List description.

threat-lvl

Threat level:

  • very-low: very low threat level

  • low: low threat level

  • medium: medium threat level

  • high: high threat level

  • very-high: very high threat level.

type

List type:

  • local: local

  • updatable: if the list is updatable, specify URL address for downloading updates (url). List update frequency is set by the schedule parameter in the crontab format.

Crontab format: (minutes: 0-59) (hours: 0-23) (days of the month: 1-31) (month: 1-12) (days of the week: 0-6; where 0 is Sunday). You can set each field as follows:

  • An asterisk (*) denotes the entire range (from the first number to the last).

  • A dash (-) denotes a number range. For example, "5-7" means 5, 6, and 7.

  • Lists: comma-separated numbers or ranges. For example, "1,5,10,11" or "1-11,19-23".

  • An asterisk or range spacing: used for spacing out values in ranges. The increment is given after a slash. Examples: "2-10/2" means "2,4,6,8,10" while "*/2" in the "hours" field means "every two hours".

lists

Select existing IP lists to add to the list being created.

ips

IP addresses or a range of IP addresses to include in the list. Format: <ip>, <ip/mask>, or <ip_range_start-ip_range_end>.

To edit a list (parameters available to update are identical to those used to create a list), use the following command:

Admin@nodename# set libraries ip-list <ip-list-name> <parameter>

To add new addresses to a list, use the following command:

Admin@nodename# set libraries ip-list <ip-list-name> [ <ip1> <ip2> ... ]

To delete an entire address list or individual IP addresses it contains, use the following commands:

Admin@nodename# delete libraries ip-list <ip-list-name> Admin@nodename# delete libraries ip-list <ip-list-name> ips [ <ip1> <ip2>... ]

To display information about all existing lists, use the following command:

Admin@nodename# show libraries ip-list

To display information about an individual list, specify the IP address list name:

Admin@nodename# show libraries ip-list <ip-list-name>

To display the contents of an IP address list, use the following command:

Admin@nodename# show libraries ip-list <ip-list-name> items