Associating an IP Address Group with a Security Group or Network ACL

Scenarios

An IP address group cannot function on its own after creation. To use it, you must associate it with a resource. This section describes how to do that.

An IP address group can be associated with security groups and network ACLs.

When adding a security group rule, you can set the Source or Destination to IP address group.
When adding a network ACL rule, you can set the Source or Destination to IP address group.

Prerequisites

You have created an IP address group. For details, see Creating an IP Address Group.
There are IP address entries in the IP address group. For details, see Adding IP Address Entries to an IP Address Group.

Procedure

You need to associate an IP address group with resources. For details, see Table 1.

**Table 1** Associating an IP address group with resources
Associated Resource	Description	Reference
Security group	When adding a security group rule, you can set Source or Destination to IP address group.	Adding a Security Group Rule Inbound rule: Set Source to an IP address group. Outbound rule: Set Destination to an IP address group.
Network ACL	When adding a network ACL rule, you can set the Source or Destination to IP address group.	Adding a Network ACL Rule Inbound rule: Set Source or Destination to an IP address group. Either the source or the destination can use the IP address group. Outbound rule: Set Source or Destination to an IP address group. Either the source or the destination can use the IP address group.