Download Print this page

HP FlexNetwork MSR Series Command Reference Manual page 808

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

undo service { protocol [ { source { { eq | lt | gt } port | range port1 port2 } | destination { { eq | lt |
gt } port | range port1 port2 } } * | icmp-type icmp-code | icmpv6-type icmpv6-code ] | group-object
object-group-name }
undo object-id
Default
No service objects exist.
Views
Service object group view
Predefined user roles
network-admin
Parameters
object-id: Configures an object ID in the range of 0 to 4294967294. If you do not configure an ID for
the object, the system automatically assigns the object a multiple of 10 next to the greatest ID being
used. For example, if the greatest ID is 22, the automatically assigned ID is 30.
protocol: Configures the protocol number in the range of 0 to 255, or the protocol name such as TCP,
UDP, ICMP, and ICMPv6.
source: Configures a service object with a source port when the protocol is TCP or UDP.
destination: Configures a service object with a destination port when the protocol is TCP or UDP.
eq: Configures a port equal to the specified port.
lt: Configures a port smaller than the specified port.
gt: Configures a port greater than the specified port.
port: Specifies a port number in the range of 0 to 65535.
range port1 port2: Configures a service object with a port range. The value range for the port1 and
port2 arguments is 0 to 65535.
icmp-type: Configures the ICMP message type in the range of 0 to 255.
icmp-code: Configures the ICMP message code in the range of 0 to 255.
icmpv6-type: Configures the ICMPv6 message type in the range of 0 to 255.
icmpv6-code: Configures the ICMPv6 message code in the range of 0 to 255.
group-object object-group-name: Specifies a service object group by its name, a case-insensitive
string of 1 to 31 characters.
Usage guidelines
This command fails if you use it to configure or change a service object to be identical with an
existing object.
This command creates a service object if the specified object ID does not exist. Otherwise, the
command overwrites the configuration of the specified object.
When you use the lt port option, follow these guidelines:
The value of port cannot be 0.
If the value of port is 1, the system configures the object with a port number of 0.
If the value of port is in the range of 2 to 65535, the system configures the object with a port
number range of [0, port–1].
When you use the gt port option, follow these guidelines:
The value of port cannot be 65535.
If the value of port is 65534, the system configures the object with a port number of 65535.
790

Advertisement

loading