Manual Chapter :
Address and Port Lists
Applies To:
Show Versions
BIG-IP AFM
- 14.1.3, 14.1.2, 14.1.0
Address and Port Lists
About AFM address and port lists
AFM Network Firewall uses
Address and Port lists to collect multiple IP addresses and service ports in single configuration objects. Firewall policies are then configured to reference the appropriate address and port list. While you can create firewall policies that contain many individual IP address and service port entries, F5 recommends creating and associating address and port lists with your firewall policies to simplify administration.
- Address lists- a configuration object containing multiple IP addresses.
- Port lists- a configuration object containing multiple service ports.
Your firewall policy workflow should begin with creating address and port lists.
Creating an address List
You can create an address list containing IP addresses, fully qualified domain names or geographic locations. The address list will be used later when modifying or creating a new rule list.
- On the Main tab, click .
- ClickCreate.
- In theNameandDescriptionfields, type a name and description.
- In theAddressesfield, type an IPv4 or IPv6 IP address, a fully qualified domain name or a geographical location.
- ClickAdd.
- Repeat steps 4 and 5 to continue addingAddressesto the Address List.
- ClickFinish, orRepeatto create another shared Address List.
The new address list appears in the Address Lists area.
Next, you can create a port list to allow or deny specific application services.
Creating a port List
You can create a port list that contains one or more service ports. The new port list can be referenced later when modifying or creating a rule list.
- On the Main tab, click .
- ClickCreate.
- In theNameandDescriptionfields, type a name and optional description.
- In thePortsfield, type the service port number. For example, 22 for the SSH service.
- Click theAddbutton.
- Repeat steps 4 and 5 to continue addingPortsto the Port List.
- ClickFinished, orRepeatto create another shared Port List.
The new port list appears in Port Lists area.
Next, you can create a firewall schedule to enable firewall rules during certain hours of the day or days of the week.
