Create IP Groups

IP Groups allow you to group and manage IP addresses for Azure Firewall rules. They can have a single IP address, multiple IP addresses, or one or more IP address ranges.

Create an IP Group - Azure portal

To create an IP Group by using the Azure portal:

  1. On the Azure portal home page, select Create a resource.

  2. In the search box, enter IP Groups, and then select IP Groups.

  3. Select Create.

  4. Select your subscription.

  5. Select a resource group or create a new one.

  6. Enter a unique name for your IP Group, and then select a region.

  7. Select Next: IP addresses.

  8. Type an IP address, multiple IP addresses, or IP address ranges.

    There are two ways to enter IP addresses:

    • You can manually enter them
    • You can import them from a file

    To import from a file, select Import from a file. You may either drag your file to the box or select Browse for files. If necessary, you can review and edit your uploaded IP addresses.

    When you type an IP address, the portal validates it to check for overlapping, duplicates, and formatting issues.

  9. When finished, select Review + Create.

  10. Select Create.

Create an IP Group - Azure PowerShell

This example creates an IP Group with an address prefix and an IP address by using Azure PowerShell:

$ipGroup = @{
    Name              = 'ipGroup'
    ResourceGroupName = 'Test-FW-RG'
    Location          = 'East US'
    IpAddress         = @('10.0.0.0/24', '192.168.1.10') 
}

New-AzIpGroup @ipGroup

Create an IP Group - Azure CLI

This example creates an IP Group with an address prefix and an IP address by using the Azure CLI:

az network ip-group create \
    --name ipGroup \
    --resource-group Test-FW-RG \
    --location eastus \
    --ip-addresses '10.0.0.0/24' '192.168.1.10'

Next steps