An easier way to input a large list of blocked IPs
Options
Zyxel_James
Posts: 626 Zyxel Employee
If you want to block a large list of addresses to access your firewall, but don't want to create the address object one by one, we can do it by directly adjusting the configuration.
Solution:
a. Download the startup-config.conf and open the .conf file with txt notebook
b. Find the configuration of address-object and object-group address
c. Add the IP address in this format:
address-object <object_address1> x.x.x.x
address-object <object_address2> y.y.y.y
d. Create an address group including the address objects.
object-group address <address_group_object_name>
address-object address name1
address-object address name2
e. Apply the address group object to the blocked security policy
0
Categories
- All Categories
- 398 Beta Program
- 2.1K Nebula
- 117 Nebula Ideas
- 83 Nebula Status and Incidents
- 5.2K Security
- 99 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 69 Switch Ideas
- 923 WirelessLAN
- 35 WLAN Ideas
- 5.9K Consumer Product
- 212 Service & License
- 337 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.1K FAQ
- 1K Nebula FAQ
- 445 Security FAQ
- 238 Switch FAQ
- 213 WirelessLAN FAQ
- 47 Consumer Product FAQ
- 142 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 72 About Community
- 62 Security Highlight