Download Print this page

HP FlexNetwork MSR Series Command Reference Manual page 809

Comware 7 security
Hide thumbs Also See for FlexNetwork MSR Series:

Advertisement

If the value of port is in the range of 0 to 65533, the system configures the object with a port
number range of [port+1, 65535].
When you use the range port1 port2 option, follow these guidelines:
If port1 is equal to port2, the system configures the object with the port number port1.
If port1 is smaller than port2, the system configures the object with the port number range.
If port1 is greater than port2, the system changes the range to [port2, port1] and configures the
object with the changed port number range.
If port1 is 0, the range is displayed as lt port2+1.
If port2 is 65535, the range is displayed as gt port1–1.
When use the group-object object-group-name option, follow these guidelines:
The object group to be used must be a service object group.
If the specified object group does not exist, the system creates a service object group with the
name you specified and uses the object group for the object.
Two object groups cannot use each other at the same time.
The system supports a maximum of five object group hierarchy layers. For example, if groups 1,
2, 3, and 4 use groups 2, 3, 4, and 5, respectively, group 5 cannot use another group and group
1 cannot be used by another group.
Examples
# Configure a service object with a protocol number of 100.
<Sysname> system-view
[Sysname] object-group service servicegroup
[Sysname-obj-grp-service-servicegroup] service 100
# Configure a service object with the source and destination port numbers for the TCP service.
<Sysname> system-view
[Sysname] object-group service servicegroup
[Sysname-obj-grp-service-servicegroup] service tcp source eq 100 destination range 10 100
# Configure a service object with the message type and code for the ICMP service.
<Sysname> system-view
[Sysname] object-group service servicegroup
[Sysname-obj-grp-service-servicegroup] service icmp 100 150
# Configure a service object using object group servicegroup2.
<Sysname> system-view
[Sysname] object-group service servicegroup
[Sysname-obj-grp-service-servicegroup] service group-object servicegroup2
791

Advertisement

loading