An IP set is a group of IP addresses that can be used as sources and destinations in firewall rules.

An IP set can contain a combination of individual IP addresses, IP ranges, and subnets. You can specify IPv4 or IPv6 addresses, or both. An IP set can be a member of NSGroups.

Note: IPv4 addresses and IPv6 addresses are supported for source or destination ranges for firewall rules.

Procedure

  1. From your browser, log in with admin privileges to an NSX Manager at https://<nsx-manager-ip-address>.
  2. Select Advanced Networking & Security > Inventory > Groups > IP Sets > Add.
  3. Enter a name.
  4. (Optional) Enter a description.
  5. In Members, enter individual IP addresses, IP ranges, and subnets in a comma separated list.
  6. Click Save.