Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Rule elements
If an organization requires many different address translations for
multiple IP addresses, you would normally need to create an
individual rule for each different NAT or redirection scenario, which
can become difficult to manage. However, using netmaps you can
map multiple IP addresses and subnets to alternate addresses without
creating numerous rules.
A netmap consists of one or more netmap members. A netmap
member is any IP address or subnet object that you define. Each
member in the netmap is mapped to an alternate address that you
specify. See “Configuring netmaps” on page 5-16 for more
information.
When creating a rule, you can use netmaps as follows:
If you select a netmap in the source address field for a rule, the
appropriate NAT properties are automatically supplied based on
the mapping configured for each IP address or subnet in that
netmap.
If you select a netmap as the destination address in a rule, the
appropriate redirection properties are automatically supplied
based on the mapping configured for each IP address and subnet
in that netmap.
Subnet network objects
A subnet network object is a subset of a larger network, and consists
of a network address and a subnet mask. A subnet object defines a
range of IP addresses within a specific subnet. See “Configuring
subnet objects” on page 5-17 for more information.
Note: For more information on subnets, refer to Section 13.4 in the UNIX System
Administration Handbook, third edition.
Netgroup objects
A netgroup object consists of two or more network objects, identified
by a single name. For example, you can define a netgroup that
includes a number of domains, several hosts that are outside of these
domains, and a subnet. See “Configuring netgroup object” on page 5-
18 for more information.
Note: A netgroup may contain nested netgroups as members.
Understanding Policy Configuration 4-11