Overview:

An IPSET (IP Set) is a collection of IP addresses or network ranges (applicable to both IPv4 and IPv6) that can be grouped together and managed as a single entity. Using IPSETs allows for more efficient network administration by enabling you to apply security rules, traffic policies, or other settings to a group of IP addresses simultaneously rather than managing them individually.

Operations Overview

1. Viewing Existing IPSETs

To view the list of configured IPSETs:

1. Navigate to the Network > IPSET section.
2. Select the appropriate IP version tab (IPv4 or IPv6).
3. The main dashboard displays a list of existing IPSETs for that version, showing their Name and Description.

2. Creating an IPSET

To create a new IPSET:

1. Navigate to the Network > IPSET section.
2. Select IPv4 or IPv6 depending on the network type.
3. Click the ADD IPSET button.
4. In the Add IPSET dialog, provide the following details:
   • Name: Enter a unique name for the IPSET (e.g., googlevpn).
   • Description: Enter a descriptive label for the set (e.g., Google VPN IPs).
5. Click ADD to create the IPSET.

3. Managing IPSET Entries

Once you have an IPSET, you can manage the specific IP addresses or subnets within that set.

• View Entries: Click on the specific IPSET row in the main dashboard to view the entries contained within it (e.g., viewing entries for googlevpn).

• Add Entries:
  • Navigate to the entries list for an IPSET.
  • Click ADD IPSET ENTRY.
  • Enter the IPv4 address or CIDR network range (e.g., 1.1.1.1 or 1.1.1.0/24) and confirm.

• Import Entries: Use the IMPORT IPSET ENTRIES button to batch-add multiple entries at once using CSV.

• Delete Entries: Select the desired entries from the list and click DELETE SELECTED to remove them.

4. Using IPSETs in Classification Rules

One of the primary benefits of IPSETs is the ability to use them as a matcher in Firewall, QoS, Load balancing, Bypassing IPS or SSL rules to simplify traffic management.

1. Navigate to Security > Firewall.
2. When creating a New Rule and configuring Packet Matching (e.g., Source IPSet / Destination IPSet / User Group), you can select a pre-configured IPSET from the dropdown menu.
3. Selecting an IPSET (e.g., googlevpn, lanpcgroup) applies the rule to all IP addresses contained within that set.