How to Assign a Security Template to a Host or a Group of Hosts

Before You Begin

You must be in the Security Administrator role in the global zone.

All hosts that you want to assign to a template must exist in the Computers and Networks tool. For details, see How to Add Hosts to the System's Known Network.

1. In the Solaris Management Console, navigate to the Security Templates tool.

   For details, see How to Open the Trusted Networking Tools.

2. Double-click the appropriate template name.

3. Click the Hosts Assigned to Template tab.

4. To assign the template to a single host, do the following:

   1. In the Hostname field, type the host's name.

   2. In the IP Address field, type the host's address.

   3. Click the Add button.

   4. To save your changes, click OK.

5. To assign a template to a group of hosts with contiguous addresses, do the following:

   1. Click Wildcard.

   2. In the IP Address field, type the IP address.

   3. In the Prefix field, type the prefix that describes the group of contiguous addresses.

   4. Click the Add button.

   5. To save your changes, click OK.

Example 13–8 Adding an IPv4 Network as a Wildcard Entry

In the following example, a security administrator assigns several IPv4 subnetworks to the same security template. In the Hosts Assigned to Template tab, the administrator adds the following wildcard entries:

IP Address: 192.168.113.0
IP address: 192.168.75.0

Example 13–9 Adding a List of IPv4 Hosts as a Wildcard Entry

In the following example, a security administrator assigns contiguous IPv4 addresses that are not along octet boundaries to the same security template. In the Hosts Assigned to Template tab, the administrator adds the following wildcard entries:

IP Address: 192.168.113.100
Prefix Length: 25

This wildcard entry covers the address range of 192.168.113.0 to 192.168.113.127. The address includes 192.168.113.100.

Example 13–10 Adding a List of IPv6 Hosts as a Wildcard Entry

In the following example, a security administrator assigns contiguous IPv6 addresses to the same security template. In the Hosts Assigned to Template tab, the administrator adds the following wildcard entries:

IP Address: 2001:a08:3903:200::0
Prefix Length: 56

This wildcard entry covers the address range of 2001:a08:3903:200::0 to 2001:a08:3903:2ff:ffff:ffff:ffff:ffff. The address includes 2001:a08:3903:201:20e:cff:fe08:58c.