


File Formats                                           address(4)



NAME
     address - address object for SunScreen configuration

DESCRIPTION
     An address object represents an IP address or collection  of
     IP  addresses  to  be  used  in  filtering rules, NAT rules,
     interface definitions, remote access rules,  and  vpn  gate-
     ways.  It  is   manipulated  via the configuration editor or
     SunScreen administration GUI.

     There are three sub-types of addresses:   HOST,  RANGE,  and
     GROUP.

     The HOST address sub-type represents a single  host  with  a
     single IP address.

     The RANGE address sub-type represents a contiguous range  of
     IP   addresses,   including   the  starting  and  ending  IP
     addresses.

     The GROUP address sub-type represents a collection of  other
     addresses.  It includes a list of addresses by name whose IP
     addresses are to be included in its  value  and  a  list  of
     addresses by name whose IP addresses are to be excluded from
     its value.

     All addresses may have an optional COMMENT field  associated
     with  them  which  is  a 256-character or less user-provided
     comment.

     All addresses may be optionally associated with  a  specific
     SCREEN  object.   If  an address is so associated, its value
     will only be used on the Screen with which it is associated.
     This allows multiple Screens to have different values for an
     address object of the same name.  This is useful, for  exam-
     ple,  if  one wanted to use the addresses "inside" and "out-
     side" for all the Screens being manged.

     The addresses named "*" and  "localhost"  are  reserved  and
     cannot  be  modified in any way.  The value of "*" is all IP
     addresses.  The same as if a RANGE address is defined with a
     starting  IP  address of 0.0.0.0 and an ending IP address of
     255.255.255.255.  The value of "localhost" is the set of all
     IP addresses associated with the Solaris machine.

     An address's unique name which is its given  name  plus  the
     name  of  the  Screen  if it is so associated.  "server" and
     "server" SCREEN "LA" are two  examples  of  addresses  named
     "server".

     All references to addresses are to its generic name, without
     regard to any associated Screen.



                  Last change: 31 January 2000                  1






File Formats                                           address(4)



SEE ALSO
     ssadm-edit(1M),   accessremote(4),   interface(4),   nat(4),
     rule(4), screen(4)




















































                  Last change: 31 January 2000                  2



