An IP set is a group of IP addresses that you can use as sources and destinations in firewall rules.

An IP set can contain a combination of individual IP addresses, IP ranges, and subnets. You can specify IPv4 or IPv6 addresses, or both. An IP set can be a member of NSGroups.

Note: IPv6 is not supported for source or destination ranges for firewall rules.


  1. From your browser, log in with admin privileges to an NSX Manager at https://nsx-manager-ip-address.
  2. Select Inventory > Groups from the navigation panel.
  3. Select IP Sets at the top of the main panel.
  4. Click Add.
  5. Enter a name.
  6. (Optional) Enter a description.
  7. Enter individual addresses or a range of addresses.
  8. Click Save.