To configure a security host group policy for a 7705 SAR

Purpose

A host group policy is configured with single source/destination IP addresses or a range of IP addresses. For a single pre-assigned set of IP addresses that are allowed in a network, a list can be created once and assigned to every edge router. The host group policy can be assigned to a security policy.

Steps
 
1 

Choose Policies→Security from the NFM-P main menu. The Security Policies form opens.


2 

Click Create and choose Security Host Group, or choose an existing security host group policy and click Properties. The Host Group, Global Policy (Create|Edit) form opens with the General tab displayed.


3 

Configure the required general parameters and click Apply.


4 

Click on the Host Group Entries tab and click Create. The Host Group Entry, Global Policy form opens.


5 

Configure the required general parameters and the parameters in the IP Address panel.


6 

Save your changes. See To release and distribute a policy to release and distribute the policy to NEs.

End of steps