How to Configure Named Networks

To successfully create a Named Network object, you must carefully plan your Named Network structure because it cannot be edited after it has been created. Groups and values must then be added to the structure to properly represent your network. Values can represent single networks, multiple networks, sequential networks, or non-sequential networks. They can also be used as placeholders by creating empty containers.

Open

Named Network objects can also be created in the Global, Range, and Cluster Firewall Objects. For cluster and range Named Network objects, the Own Firewall Objects must be enabled in the Cluster or Range Properties.

• Verify that the feature level is 7.2. or above. For more information, see How to Manage Ranges and Clusters.

Enter the scope and value for the static bits. The scope always starts with the first bit of the 32-bit IPv4 address. E.g., 8 for 10.*.*.* or 16 for 192.168.*.* The Named Network structure cannot be changed after this window is closed.

1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Firewall > Forwarding Rules.

2. Click Lock. 

3. In the left menu, click Named Networks.

4. Right-click in the main area and select New Named Network Object, or click + on the top right of the main area. The Create Named Network window opens.
   

5. Configure the root Named Network tree nodes to reserve the first X static bits:

   • Name – Enter the name for the Named Network.

   • IP Version – Select the IP version.

   • Network – Enter the network covered by this Named Network structure in CIDR format. E.g., 10.0.0.0/8

6. In the Named Network Structure table, click + to create a Named Network tree node. A new line section is added to the Named Network Structure table.
   

7. Configure the Named Network tree node:

   • Name – Click the mouse-over edit button and enter the name for the Named Network tree node. Use category names, not values. E.g., "Location" not "EMEA".

   • Bits – Click the mouse-over edit button and enter the scope for this tree node.

8. (optional) Click the mouse-over edit button in the Group Category column. The Group Category window opens.
   

9. (optional) Click + to add up to five Group categories and click OK.
   

   
   

10. Configure the next Named Network tree node until the full scope has been assigned.
    

11. Verify that the number of tree nodes added to the number of group categories does not exceed 32.

12. Double-check your Named Network structure. The structure cannot be changed after it is created.

13. Click Save.

14. Click Send Changes and Activate.

The Named Network structure is now displayed.

Open

Add groups to the group categories. Check the Scope column to see the group categories for a Named Network tree node.

1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Firewall > Forwarding Rules.

2. Click Lock. 

3. In the left menu, click Named Networks.

4. Right-click a Named Network tree node and select Add new group_category_name to tree_node_name. The Create new Group window opens.
   

5. Enter the name for the new group in this category.
   

6. Repeat for the other groups in this group category.
   

7. If group subcategories exist, right-click a group and select Add new group_subcategory to tree_node .
   

8. Enter the name for the group in the group sub-category.
   

9. Click OK.

10. Repeat for all subcategories and add groups to each group subcategory.
    

11. Repeat for all Named Network tree nodes with group categories.

12. Click Send Changes and Activate. 

The Named Network structure and all groups and subgroups are now filled in.

Open

Named Network values can be used in varying ways:

• Named Network value for one or multiple sequential networks

• Named Network value containers for multiple non-sequential networks

• Named Network value containers with sub-values in different scopes

Network values are added either to the Named Network tree node, or, if groups are configured, to the lowest group in the Named Network tree structure.

1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > Firewall > Forwarding Rules.

2. Click Lock. 

3. In the left menu, click Named Networks.

4. Right-click a Named Network tree node or Named Network group, whichever is the lowest in the tree structure, and select Add new Value to name_of_group .
   

5. Configure the Named Network value:

   • Value – Select the value from the drop-down list. Only values matching the scope of the Named Network tree node are displayed.

   • Number of Addresses – Enter the number of addresses to include in this network. Enter 1 if one network is assigned
     

6. Click Add and Close.

7. Click Send Changes and Activate.