I'm trying to create an address-book with admin's IP addresses from different subnets/vlan, but with problems..
root@SRX2# show security address-book admins
address admin-cable 192.168.3.10/32;
address admin-wifi 192.168.4.10/32;
root@SRX2# show security policies from-zone mobile to-zone managment policy permit-admins
[edit security policies from-zone mobile to-zone managment]
Source address or address_set (admins) not found.
error: configuration check-out failed
The address-book has not be found when commiting. How to create such address-book?
Greetings, Is this particular address book Attached to a zone?
Attach the address book to a security zone.
Regards,Lil Dexx JNCIE-ENT#863
If this solves your problem, please mark this post as "Accepted Solution" so we can help others too \:)/
Typically you will create the address and address-set objects under the zone hierarchy.
The top level is for the global zone.
set security zones security-zone trust address-book address admin-cable 192.168.3.10/32
set security zones security-zone trust address-book address-set address permit-admins address admin-cable