
It is important to note that while MAC address objects can be added to groups,
it is recommended that they be grouped separately from other address object types.
This recommendation is based on the fact that address groups are also used to create
NAT policies where MAC address object types are ignored.
Creating Address Objects and Address Groups
To illustrate how address objects and groups are created, we continue with the Data
Center example. Figure 4.9 shows the example Data Center network diagram.Table
4.4 lists network IP address assignments.
Figure 4.9 Network Diagram
www.syngress.com
138 Chapter 4 • Policy Configuration
365_SONIC_FW_04.qxd 4/6/06 ...