Rule Match Order; Rule Description; Object Policy Configuration Task List; Configuration Prerequisites - HP MSR Series Configuration Manual

system automatically assigns 60001. If the greatest ID is 65534, the system assigns the smallest
unused rule ID to the rule.

Rule match order

The system matches packets against rules in the order the rules were configured. The match
process stops when a match is found. You can use the display this command in zone pair view to
check the rule configuration order. You can use the move rule command in object policy view to
change the rule configuration order.

Rule description

You can configure a description for each rule to identify different rules in an object policy.

Object policy configuration task list

Tasks at a glance
(Required.)
•

Creating an IPv4 object policy

•
Creating an IPv6 object policy
(Required.)
•
Configuring an IPv4 object policy rule
•
Configuring an IPv6 object policy rule
(Required.)
(Optional.)
(Optional.)

Configuration prerequisites

Before configuring an object policy, complete the following tasks:
•
Configure time ranges (see ACL and QoS Configuration Guide).
•
Configure IPv4 address objects, IPv6 address objects, and service objects (see
object

Creating object policies

Creating an IPv4 object policy
Step
1. Enter system view.
2. Create an IPv4 object
policy and enter its
view.
Creating object policies:
Configuring object policy
Applying object policies to zone pairs
Changing the rule match order
Enabling rule matching acceleration
groups").
Command
system-view
object-policy ip object-policy-name
rules:
474
"Configuring
Remarks
N/A
By default, no object policy exists.