interface groups


can server as alias for interfaces

but can also put multiple interfaces in one group

  ifconfig em0 group ext
  ifconfig em1 group ext
  ifconfig vlan42 group int

in pf, just refer to groups by name
as if they were interfaces
can make rulsets hw-independent