SRX

Hello,

I'm trying to create an address-book with admin's IP addresses from different subnets/vlan, but with problems..

root@SRX2# show security address-book admins 
address admin-cable 192.168.3.10/32;
address admin-wifi 192.168.4.10/32;

root@SRX2# show security policies from-zone mobile to-zone managment policy permit-admins          
match {
    source-address admins;
    destination-address any;
    application any;
}
then {
    permit;
}


root@SRX2# commit 


[edit security policies from-zone mobile to-zone managment]
  'policy permit-admins'
    Source address or address_set (admins) not found.
error: configuration check-out failed

The address-book has not be found when commiting. How to create such address-book?

Hi Gabriel,

Greetings, Is this particular address book Attached to a zone? 

for example:

Attach the address book to a security zone.

Regards,
Lil Dexx JNCIE-ENT#863

If this solves your problem, please mark this post as "Accepted Solution" so we can help others too \:)/

Typically you will create the address and address-set objects under the zone hierarchy.  

The top level is for the global zone.

set security zones security-zone trust address-book address admin-cable 192.168.3.10/32

set security zones security-zone trust address-book address-set address permit-admins address admin-cable