CLI: Network Object

You can use the network-object command to create a new network objecta logical definition created and stored in the Exinda lilbrary, can represent any network component or modify the properties of an existing network object.

network-object <name> {subnet|location|subnet-report}

To create a new network object:

[no] network-object <name>

  • This creates a network object if it does not already exist.

To add a subnet to a network object:

network-object <name> subnet <ip-address> <netmask or mask length>

  • <name> - The name of the network object
  • <ip-address> - The IPv4 or IPv6 address
  • <netmask or mask length> - The IPv4 netmask or mask length. E.g. 255.255.255.0 or /24

To set the location of the network object with respect to the appliance:

network-object <name> location {internal, external, inherit}

  • location internal - Specify that IPInternet protocol addresses in this network object are on the internal (LANLocal area network) side of the appliance
  • location external - Specify that IP addresses in this network object are on the external (WANWide Area Network) side of the appliance.
  • location inherit - Specify that the location is automatically inherited from parent network objects. For, if all subnets in this network object fall within an existing network object that is has a location of internal, this network object will also be internal.

To include this network object in the subnet report:

network-object <name> subnet-report

EXAMPLE

Create a network object called 'localServer' that is an internal host on 192.168.1.1/255.255.255.255, and enable subnet reporting:

network-object localServer subnet 192.168.1.1 /32

network-object localServer location internal

network-object localServer subnet-report

EXAMPLE

Create an network object called 'IPv6 Server' that is an external host on 2001:db8::1234:5678/128

network-object "IPv6 Server" subnet 2001:db8::1234:5678 /128

network-object "IPv6 Server" location external

To see whether inherit resolved to internal or external:

show network-object <name>