Creating An Ipv6 Object Policy; Configuring Object Policy Rules; Configuring An Ipv4 Object Policy Rule - HP MSR Series Configuration Manual

Step
3. (Optional.) Configure a
description for the
object policy.

Creating an IPv6 object policy

Step
1. Enter system view.
2. Create an IPv6 object
policy and enter its view.
3. (Optional.) Configure a
description for the object
policy.

Configuring object policy rules

Configuring an IPv4 object policy rule

You can specify an existing object group in an IPv4 object policy rule for matching target IPv4
packets. If no object group is specified for a rule, the rule applies to all IPv4 packets.
The following object groups can be referenced in a rule for packet matching:
•
Source IPv4 address object group—Used for matching the source IPv4 addresses of
packets.
•
Destination IPv4 address object group—Used for matching the destination IPv4 addresses
of packets.
•
Service object group—Used for matching the service types carried in packets.
•
VRF instance—Used for matching the MPLS L3VPN instances of packets.
For more information about object groups, see
To configure an IPv4 object policy rule:
Step
1. Enter system
view.
2. Enter IPv4
object policy
view.
3. Configure an
IPv4 object
policy rule.
4. (Optional.)
Configure a
description for
the rule.
Command
description text
Command
system-view
object-policy ipv6
object-policy-name
description text
Command
system-view
object-policy ip object-policy-name
rule [ rule-id ] { drop | pass } [ [ source-ip
object-group-name | any ] [ destination-ip
object-group-name | any ] [ service
object-group-name | any ] [ vrf vrf-name ]
[ counting ] [ disable ] [ logging ] [ time-range
time-range-name ] ] *
rule rule-id comment text
475
Remarks
By default, an object policy does not
have a description.
Remarks
N/A
By default, no object policy exists.
By default, an object policy does
not have a description.
"Configuring object groups."
Remarks
N/A
N/A
By default, no object policy
rule exists.
If you specify a nonexistent
object group, the rule does
not match packets.
By default, an object policy
rule does not have a
description.