Configuring Object Groups; Overview; Configuring An Ipv4 Address Object Group; Configuring An Ipv6 Address Object Group - HPE FlexNetwork HSR6600 Security Configuration Manual

Configuring object groups

Overview

An object group is a group of objects that can be used by an ACL, object policy, or object group to
identify packets. Object groups are divided into the following types:
•
IPv4 address object group—A group of IPv4 address objects used to match the IPv4 address
in a packet or match the user from whom a packet comes.
•
IPv6 address object group—A group of IPv6 address objects used to match the IPv6 address
in a packet or match the user from whom a packet comes.
•
Port object group—A group of port objects used to match the protocol port number in a
packet.
•
Service object group—A group of service objects used to match the upper-layer service in a
packet.

Configuring an IPv4 address object group

Step
1. Enter system view.
2. Configure an IPv4
address object group and
enter its view.
3. (Optional.) Configure a
description for the IPv4
address object group.
4. Configure an IPv4
address object.
5. Exclude an IPv4 address
from the IPv4 address
object.

Configuring an IPv6 address object group

Step
1. Enter system view.
2. Configure an IPv6
address object group and
enter its view.
Command
system-view
object-group ip address
object-group-name
description text
[ object-id ] network { host { address
ip-address | name host-name } | subnet
ip-address { mask-length | mask |
wildcard wildcard } | range ip-address1
ip-address2 | group-object
object-group-name | user user-name
[ domain domain-name ] | user-group
user-group-name [ domain
domain-name ] }
object-id network exclude
ipv4-address
Command
system-view
object-group ipv6 address
object-group-name
498
Remarks
N/A
The system has one default
IPv4 address object group.
By default, an object group
does not have a description.
By default, no objects exist.
By default, no IPv4 address in
an IPv4 address object is
excluded.
Remarks
N/A
The system has one default
IPv6 address object group.