Amer Networks E5Web GUI - Manual (Page 204)

Moving Group Objects
Once an object, such as an IP rule, is within a group, the context of move operations becomes the
group. For example, right clicking a group object and selecting Move to Top will move the
object to the top of the group, not the top of the entire table.
Moving Groups
Groups can be moved in the same way as individual objects. By right clicking the group title line,
the context menu includes options to move the entire group. For example, the Move to Top
option moves the entire group to the top of the table.
Leaving a Group
If an object in a group is right clicked then the context menu contains the option Leave Group.
Selecting this removes the object from the group AND moves it down to a position immediately
following the group.
Removing a Group
By right clicking on a group title, the displayed context menu includes the Ungroup option. This
removes the group, however all the group's member objects remain. The group title line
disappears and the individual members appear unindented in the normal ungrouped color.
Individual object index positions within the table are not affected.
A group is also removed if there are no members left. If there is only one member of a group,
when this leaves the group, the group will no longer exist and the title line will disappear..
Groups and Folders
It is important to distinguish between collecting together objects using a folder and collecting it
together using groups.
Either can be used to group objects but a folder is similar to the concept of a folder in a
computer's file system. However, a folder can not be part of a group. Groups collect together
related basic objects and a folder is not of this type. It is possible, on the other hand, to use
groups within a folder.
It is up to the administrator how to best use these features to best arrange cOS Core objects.
3.6.7. IP Policies
The IP Rule objects described previously provide very finely grained control over how arriving
traffic is handled by cOS Core. The IP Policy object provides the ability to achieve the same results
as IP rules but in a more intuitive way so that simple policies can be quickly defined.
The aim with an IP policy is to hide some of the potential complexities of IP rules. For example, a
NAT policy might require several IP rules but may be achievable with a single IP policy. The
several IP rules are still created in the background but the administrator is only aware of the IP
policy object.
It is up to the administrator to decide if they will use an IP rule or an IP policy to describe what is
required from cOS Core. Where there is a choice, using an IP policy is recommended.
Chapter 3: Fundamentals
204