Adding Custom IP Address Groups

Constraints

• An IP address group can contain up to 640 IP addresses.
• A firewall instance can contain up to 3800 IP address groups.
• A firewall instance can contain up to 30,000 IP addresses.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane, click and choose Security & Compliance > Cloud Firewall. The Dashboard page will be displayed, as shown in Figure 1.
   Figure 1 CFW Dashboard
   

4. (Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column to go to the details page.
5. In the navigation tree on the left, choose Access Control > IP Address Groups. The IP Address Groups page is displayed.
6. Click Add IP Address Group. On the Basic Information page configure the parameters. For more information, see IP address group parameters.

   Table 1 IP address group parameters

   Parameter	Description
   IP Address Group Name	Name of an IP address group. It must meet the following requirements: Only uppercase letters (A to Z), lowercase letters (a to z), numbers (0 to 9), and the following special characters are allowed: -_ The length cannot exceed 255 characters.
   Description	Usage and application scenario of a rule It must meet the following requirements: Only letters (A to Z and a to z), numbers (0 to 9), spaces, and the following characters are allowed: -_ The length cannot exceed 255 characters.
   IP Addresses	Enter IP addresses and click Parse to add them to the IP address list. The input can be: A single IP address. Example: 192.168.10.5 Address segment. Example: 192.168.2.0/24 Consecutive IP addresses. Example: 192.168.0.2-192.168.0.10 Multiple IP addresses. Use commas (,), semicolons (;), line breaks, tab characters, or spaces to separate them. Example: 192.168.1.0,192.168.1.0/24.

7. Confirm the information and click OK. The IP address group is added.

Follow-up Operations

• Adding an IP Address
• An IP address group takes effect only after it is set in a protection rule. For more information, see Adding a Protection Rule.