Differences

This shows you the differences between two versions of the page.

Link to this comparison view

edgerouter:address-groups [2015/04/27 20:39] (current)
brielle created
Line 1: Line 1:
 +====== Useful Address Groups ======
 +
 +Sometimes its good to have common netblocks in an '​address-group'​ rule in case you need to allow or deny certain types of traffic.
 +
 +    set firewall group address-group Private-RFC-Ranges description 'RFC 1918 Private Ranges'​
 +    set firewall group address-group Private-RFC-Ranges address 10.0.0.0/8
 +    set firewall group address-group Private-RFC-Ranges address 172.16.0.0/​12
 +    set firewall group address-group Private-RFC-Ranges address 192.168.0.0/​16
 +
 +
 +    set firewall group ipv6-address-group IPv6-FE80 description '​fe80::/​10 (aka Link-Local) Network'​
 +    set firewall group ipv6-address-group IPv6-FE80 ipv6-network '​fe80::/​10'​
 +
 +In particular, the IPv6-FE80 group is important to use if you have IPv6, as you'll need to make sure that your LAN machines can communicate with the router for things like DHCPv6.
  
  • edgerouter/address-groups.txt
  • Last modified: 2015/04/27 20:39
  • by brielle