One address can be used on many places: firewall rules, NAT etc. It would be nice to have list with address aliases (server1=x.x.x.x,…) and then use {server1} in firewall rules etc. instead of x.x.x.x
edit: or list with aliases for any value (IP,MAC, port,…)
For firewall rules, for some uses, current address list feature is good enough. But not for everything, e.g. srcnat’s to-addresses can be only address.
So possibility to have address aliases sounds interesting. Ideally as global thing, so that the alias could be used in every single place where router accepts IP address (firewall rules, ipsec, tunnels, dns servers, firewall’s address list could also take entries as aliases, …). It could allow really nice high-level and easy to work with approach. But it looks like a lot of work would be required.
I would like this feature as well, to be able to use a name rather than a (possibly dynamic) IP-address in srcnat, dstnat and firewall rules. Preferably, this aliases can be tied to DHCP leases, but having to configure them manually, statically would already be a huge improvement.