CLI: Network Object
You can use the network-object
command to create a new network objecta logical definition created and stored in the Exinda lilbrary, can represent any network component or modify the properties of an existing network object.
network-object <name> {subnet|location|subnet-report}
To create a new network object:
[no] network-object <name>
- This creates a network object if it does not already exist.
To add a subnet to a network object:
network-object <name> subnet <ip-address> <netmask or mask length>
<name>
- The name of the network object<ip-address>
- The IPv4 or IPv6 address<netmask or mask length>
- The IPv4 netmask or mask length. E.g. 255.255.255.0 or /24
To set the location of the network object with respect to the appliance:
network-object <name> location {internal, external, inherit}
location internal
- Specify that IPInternet protocol addresses in this network object are on the internal (LANLocal area network) side of the appliancelocation external
- Specify that IP addresses in this network object are on the external (WANWide Area Network) side of the appliance.location inherit
- Specify that the location is automatically inherited from parent network objects. For, if all subnets in this network object fall within an existing network object that is has a location of internal, this network object will also be internal.
To include this network object in the subnet report:
network-object <name> subnet-report
EXAMPLE
Create a network object called 'localServer' that is an internal host on 192.168.1.1/255.255.255.255, and enable subnet reporting:
network-object localServer subnet 192.168.1.1 /32
network-object localServer location internal
network-object localServer subnet-report
EXAMPLE
Create an network object called 'IPv6 Server' that is an external host on 2001:db8::1234:5678/128
network-object "IPv6 Server" subnet 2001:db8::1234:5678 /128
network-object "IPv6 Server" location external
To see whether inherit resolved to internal or external:
show network-object <name>