mirror of
https://github.com/opnsense/docs
synced 2024-11-09 01:10:33 +00:00
32 lines
1.5 KiB
ReStructuredText
32 lines
1.5 KiB
ReStructuredText
|
===========================
|
||
|
|
[Interface] Groups
|
||
|
|
===========================
|
||
|
|
|
||
|
|
To simplify rulesets, you can combine interfaces into **Interface Groups** and add policies which will be applied to
|
||
|
|
all interfaces in the group.
|
||
|
|
|
||
|
|
Since interface groups are processed before normal interfaces, you shouldn't have issues with overlapping rules in
|
||
|
|
the interface tabs itself. More details about processing order can be found :ref:`here <Firewall_Rule_Processing_Order>`
|
||
|
|
|
||
|
|
|
||
|
|
.. Note::
|
||
|
|
|
||
|
|
For multiwan setups be careful with groups, since groups are not bound to a specific interface, they will
|
||
|
|
use the normal routing system to determine the next hop when applied on WAN type interfaces (:code:`reply-to` is not used here).
|
||
|
|
|
||
|
|
|
||
|
|
--------------------
|
||
|
|
Settings
|
||
|
|
--------------------
|
||
|
|
|
||
|
|
Groups are actually pretty easy to setup and don't require a lot of settings.
|
||
|
|
|
||
|
|
=====================================================================================================================
|
||
|
|
|
||
|
|
==================================== ===============================================================================
|
||
|
|
Name The technical name of the group. Has some restrictions which also apply
|
||
|
|
to the underlying operating system.
|
||
|
|
Description A user friendly description, informational use only
|
||
|
|
Members Member interfaces
|
||
|
|
==================================== ===============================================================================
|