Adding an IP Address Group

With IP address groups, you can quickly add IP addresses or IP address ranges to a blacklist or whitelist rule.

If you have enabled enterprise projects, you can select your enterprise project from the Enterprise Project drop-down list and add IP address/range groups in the project.

Prerequisites

You have purchased WAF.

Constraints

For dedicated and cloud load balancer WAF instances, if the load balancers they use support IPv6 addresses, those WAF instances also support IPv6 addresses and IPv6 address ranges.
Before adding an address group to a blacklist or whitelist rule, make sure that your IP address blacklist and whitelist rule quota has not been used up.
- For details, see Configuring IP Address Blacklist and Whitelist Rules to Block or Allow Specified IP Addresses.
  For details about specifications, see Edition Differences.
- If the quota for IP address whitelist and blacklist rules of your cloud WAF cannot meet your requirements, you can purchase rule expansion packages under the current WAF instance edition or upgrade your WAF instance edition to increase such quota. A rule expansion package allows you to configure up to 10 IP address blacklist and whitelist rules.
  For details, see Upgrading Cloud WAF Edition and Specifications

Adding a Blacklist or Whitelist IP Address Group

Log in to the WAF console.
Click in the upper left corner and select a region or project.
(Optional) If you have enabled the enterprise project function, in the upper part of the navigation pane on the left, select your enterprise project from the Filter by enterprise project drop-down list. Then, WAF will display the related security data in the enterprise project on the page.
In the navigation pane on the left, choose Objects > Address Groups.
Click the My Address Groups tab.
On the upper left of the address group list, click Add Address Group.

On the Add Address Group panel displayed, complete the following configurations.

**Table 1** Address group parameters
Parameter	Description	Example Value
Group Name	Enter the name of the address group. An address group name can contain a maximum of 128 characters. Only letters, digits, underscores (_), hyphens (-), colons (:), and periods (.) are allowed.	waf
IP Address/Range	Enter the IP addresses or IP address ranges you want to add. Adding many IP addresses all at once In the IP Address/Range configuration area, enter the IP addresses or IP address ranges you want to add and click Add to List. You can use commas (,), semicolons (;), carriage returns (Enter), tab characters (Tab), or spaces to separate IP addresses or IP address ranges. IPv4 and IPv6 addresses are supported. For dedicated and cloud load balancer WAF instances, if the load balancers they use support IPv6 addresses, the corresponding WAF instances also support IPv6 addresses and IPv6 address ranges. In the IP address or IP address range list, check the IP address or IP address range information and enter the description. Adding IP addresses one by one Above the IP address or IP address range list, click Add and enter an IP address and description. You can enter IPv4 and IPv6 addresses.	IPv4 format: 192.168.2.3 10.1.1.0/24 IPv6 format: fe80:0000:0000:0000:0000:0000:0000:0000 ::/0

Click OK.

After the above configuration is complete, you can view the added address group in the address group list. The address group you add will also be synchronized to the address group list on the Policies > Blacklist and Whitelist page.