netdestination <dstname>

description <description6>

host <ipaddr> {vlan <vlanID> | offset <offset No>}


name <host_name>

network <ipaddr> <netmask>

no ...

range <start-ipaddr> <end-ipaddr>


This command configures an alias for an IPv4 network host, subnetwork, or range of addresses.

Aliases can simplify configuration of session ACLs, as you can use an alias when specifying the traffic source and/or destination it in multiple session ACLs. Once you configure an alias, you can use it to manage network and host destinations from a central configuration point, because all policies that reference the alias will be updated automatically when you change the alias.

When using the invert option, use caution when defining multiple aliases, as entries are processed one at a time. As an example, consider a netdestination configured with the following two network hosts:

netdestination dest1




A frame from would match the first alias entry, (which allows everything except for so the frame would be rejected. However, it would then be compared against the second alias, which allows everything except for, and the frame would be permitted.




Name for this host or domain. Maximum length is 63 characters.


Description about the this destination up to 128 characters long.


Configures a single IPv4 host. It also provides a sub command, vlan – offset to allow local net destination override.


Specifies that the inverse of the network addresses configured are used. For example, if a network of is configured, this parameter specifies that the alias matches everything except this subnetwork.


Use the name parameter to specify a domain or host name inside the netdestination object. Wildcards are supported through the asterisk (*) symbol, with the limitations described in the examples below.

A wildcard ‘*’ is allowed only once and only in the beginning of the host or domain name. (For instance, * is allowed, but example*.com and *example*.com are not allowed.)

If the wildcard is applied to the host, the netdestination matches all hosts ending with that specific domain. (The name * matches all hosts ending with the domain, such as

If the wildcard is applied to the domain, the netdestination matches all hosts ending with that domain string. (The name * matches all domains ending with, such as and


An IPv4 subnetwork consisting of an IP address and netmask.


Negates any configured parameter.


A range of IPv4 addresses consisting of sequential addresses between a lower and an upper value. The maximum number of addresses in the range is 16. If larger ranges are needed, convert the range into a subnetwork and use the network parameter.


The following command configures an alias for an internal network:

(host)[node](config) #netdestination Internal

(host)[node](config-dest) #network

The following command overrides the local network destination:

(host)[node](config #netdestination store

(host)[node](config-dest) #host vlan 55 offset 36

Command History




Command introduced.

Command Information



Command Mode

All platforms

Requires the PEFNG license.

Config mode on Mobility Conductor.