Defining Hosts for a Site

You can define static hosts, which you can then use in security rules and policies.

This definition can also be used to account for DHCP Reservation, where a static IP is assigned as part of the DHCP flow based on the client's MAC address.

You can’t create static hosts learned via BGP. Instead, you can:

  • Define a network range for the site that includes the static host
  • Create a global IP Range for the host

Translated IP shows the IP address that the PoP translates for the internal host IP address. When Static Range Translation (Administration > System Settings) is enabled for the account, you can define the translated IP range in the Networks screen.

To add a host to a site:

  1. From the navigation menu, click Network > Sites and select the site.

  2. From the navigation menu, click Site Configuration > Static Host Reservations.

  3. Click New. The Add Host panel opens.

  4. Enter these settings for the host:

    • Name

    • IP Address

    • (Optional) MAC address

  5. Click Apply. The New Host panel closes, and the host is added to the screen.

  6. Click Save. The host is added to the site.

Editing a Host

Use the Edit Host panel to edit the settings for a host.

To edit a host:

  1. From the navigation menu, click Network > Sites and select the site.

  2. From the navigation menu, click Site Configuration > Static Host Reservations.

  3. In the Name column, click the host.

    The Edit Host panel opens.

  4. Edit the settings for the host.

  5. Click Apply. The Edit Host panel closes.

  6. Click Save. The changes to the host are saved.

Deleting a Host

Before you can delete a host, make sure that it isn't used somewhere else in the Cato Management Application, such as groups or firewall rules.

Was this article helpful?

2 out of 3 found this helpful

4 comments

Date Votes
  • Comment author
    Derek Wolcott

    How do you define Hosts when you are using BGP and Floating Ranges?

  • Comment author
    Yaakov Simon

    Derek Wolcott  Great question! I checked with Product Management, and they recommended using a global IP Range for the host. I also updated the article with this information. 

  • Comment author
    Derek Wolcott
    • Edited

    Yaakov Simon  Thanks for the response! But to clarify, will this Global IP Ranges work with BGP?

    Some conflicting information in the “Using IP Ranges in Policies” document that states: “The CMA also supports Floating Ranges, which are only applied to traffic routed via BGP, and when the advertised route is an exact match to the Floating Range.”

    The way I read that, is that only floating ranges in policies will effect traffic routed via BGP. Do these Global IP Ranges still work with BGP? 

     

    Also, can these Global IP Ranges be used in Groups? I don't see the ones I have created to test showing up as available to add to a group.

  • Comment author
    Yaakov Simon

    Derek Wolcott Yes - global IP Ranges work with BGP. I will clarify the documentation to make it clearer.

    • Floating Ranges - only work with BGP
    • IP Ranges - work with all traffic

    You are correct, IP Ranges currently can't be used with Groups. It is on the roadmap. Hope this helps!