•
If port1 is equal to port2, the system configures the object with the port number port1.
•
If port1 is smaller than port2, the system configures the object with the port number range.
•
If port1 is greater than port2, the system changes the range to [port2, port1] and configures the
object with the changed port number range.
•
If port1 is 0, the range is displayed as lt port2+1.
•
If port2 is 65535, the range is displayed as gt port1–1.
When you use the group-object object-group-name option, follow these guidelines:
•
The object group to be used must be a port object group.
•
If the specified object group does not exist, the system creates a port object group with the
name you specified and uses the object group for the object.
•
Two object groups cannot use each other at the same time.
•
The system supports a maximum of five object group hierarchy layers. For example, if groups 1,
2, 3, and 4 use groups 2, 3, 4, and 5, respectively, group 5 cannot use another group and group
1 cannot be used by another group.
Examples
# Configure a port object with a port number of 100.
<Sysname> system-view
[Sysname] object-group port portgroup
[Sysname-obj-grp-port-portgroup] port eq 100
# Configure a port object with a port number smaller than 20.
<Sysname> system-view
[Sysname] object-group port portgroup
[Sysname-obj-grp-port-portgroup] port lt 20
# Configure a port object with a port number greater than 60000.
<Sysname> system-view
[Sysname] object-group port portgroup
[Sysname-obj-grp-port-portgroup] port gt 60000
# Configure a port object with a port number in the range of 1000 to 2000.
<Sysname> system-view
[Sysname] object-group port portgroup
[Sysname-obj-grp-port-portgroup] port range 1000 2000
# Configure a port object using object group portgroup2.
<Sysname> system-view
[Sysname] object-group port portgroup
[Sysname-obj-grp-port-portgroup] port group-object portgroup2
service (service object group view)
Use service to configure a service object.
Use undo service to delete a service object.
Syntax
[ object-id ] service { protocol [ { source { { eq | lt | gt } port | range port1 port2 } | destination { { eq
| lt | gt } port | range port1 port2 } } * | icmp-type icmp-code | icmpv6-type icmpv6-code ] |
group-object object-group-name }
789