On the Location page, you can classify locations by wireless network, IP segment, or VLAN.

Navigate to Objects > Location. The Location pane is on the right.

Click Add. The Location window is displayed, as shown in the following figure.

Name: Specifies the name of the location group.

Description: Specifies the description of the location group.

Type: Specifies the location group type, which can be set to IP Range, or VLAN.

IP Range: Select an IP group or enter an IP address range. Only one IPv6 address or IP address segment can be entered in each row.

VLAN: Enter a VLAN ID, one in each row.

Location objects can be imported and exported. You can export location objects in .inf format. Location objects can also be searched by IP address. Location objects cannot be searched by VLAN ID or wireless network. When you search location objects by IP address, the IP address segment needs to be displayed. For example, location object A is 2.2.2.2–5.5.5.5. If you search for 3.3.3.3, the location object needs to be displayed.

Location objects can be referenced by Internet access policies and traffic control policies but cannot be referenced by authentication policies.

A user belongs to only one location. User locations will be recorded when logs are kept.

Location objects cannot be duplicated. There are three types of location objects: SSID, IP segment, and VLAN. You can set location objects of the same type to be unique but cannot set location objects of different types to be unique. For example, the IP address of an SSID may be contained in the location defined by an IP segment. If there are duplicate location objects of different types, the device can identify location objects by SSID, IP address, and VLAN. A maximum of 1000 location objects is supported.