Adding User-defined IP Addresses and Address Groups

Constraints

• A firewall instance can have up to 3800 IP address groups.
• An IP address group can contain up to 640 IP addresses.
• A firewall instance can contain up to 30,000 IP addresses.

Adding Custom Address Groups

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
4. (Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column of a firewall to go to its details page.
5. In the navigation pane, choose Access Control > Object Groups.
6. Click the IP Address Groups tab. Click Add IP Address Group and configure parameters on the Add IP Address Group slide-out panel. For more information, see IP address group parameters.

   Table 1 IP address group parameters

   Parameter	Description
   IP Address Group Name	Name of an IP address group. It must meet the following requirements: Only uppercase letters (A to Z), lowercase letters (a to z), numbers (0 to 9), and the following special characters are allowed: -_ The length cannot exceed 255 characters.
   Description	Usage and application scenario of a rule It must meet the following requirements: Only letters (A to Z and a to z), numbers (0 to 9), spaces, and the following characters are allowed: -_ The length cannot exceed 255 characters.
   IP Addresses	Enter IP addresses and click Parse to add them to the IP address list. The input can be: A single IP address. Example: 192.168.10.5 Address segment. Example: 192.168.2.0/24 Consecutive IP addresses. Example: 192.168.0.2-192.168.0.10 Multiple IP addresses. Use commas (,), semicolons (;), line breaks, tab characters, or spaces to separate them. Example: 192.168.1.0,192.168.1.0/24.

7. Confirm the information and click OK. The IP address group is added.

Adding an IP address to a user-defined address group

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed.
4. (Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column of a firewall to go to its details page.
5. In the navigation pane, choose Access Control > Object Groups.
6. Click the name of an IP address group on the IP Address Groups tab. The IP Address Group Details dialog box is displayed..
7. Click Add IP Address. The Add IP Address slide-out panel is displayed.
   • To add IP addresses in batches, enter the IP addresses in the text box and click Parse.
     The input can be:

     • A single IP address. Example: 192.168.10.5
     • Address segment. Example: 192.168.2.0/24
     • Consecutive IP addresses. Example: 192.168.0.2-192.168.0.10

     • Multiple IP addresses. Use commas (,), semicolons (;), line breaks, tab characters, or spaces to separate them. Example: 192.168.1.0,192.168.1.0/24.
   • To add a single IP address, click Add, and enter the IP address and description.

8. Confirm the information and click OK.

Related Operations

• Exporting IP address groups: Click Export above the list and select a data range.
• Batch deleting IP addresses: In the IP Address Group Details slide-out panel, select IP addresses and click Delete above the list.

Follow-up Operations

An IP address group takes effect only after it is set in a protection rule. For more information, see Adding Protection Rules to Block or Allow Traffic.