•
If the value of port is in the range of 0 to 65533, the system configures the object with a port
number range of [port+1, 65535].
When you use the range port1 port2 option, follow these guidelines:
•
If port1 is equal to port2, the system configures the object with the port number port1.
•
If port1 is smaller than port2, the system configures the object with the port number range.
•
If port1 is greater than port2, the system changes the range to [port2, port1] and configures the
object with the changed port number range.
•
If port1 is 0, the range is displayed as lt port2+1.
•
If port2 is 65535, the range is displayed as gt port1–1.
When use the group-object object-group-name option, follow these guidelines:
•
The object group to be used must be a service object group.
•
If the specified object group does not exist, the system creates a service object group with the
name you specified and uses the object group for the object.
•
Two object groups cannot use each other at the same time.
•
The system supports a maximum of five object group hierarchy layers. For example, if groups 1,
2, 3, and 4 use groups 2, 3, 4, and 5, respectively, group 5 cannot use another group and group
1 cannot be used by another group.
Examples
# Configure a service object with a protocol number of 100.
<Sysname> system-view
[Sysname] object-group service servicegroup
[Sysname-obj-grp-service-servicegroup] service 100
# Configure a service object with the source and destination port numbers for the TCP service.
<Sysname> system-view
[Sysname] object-group service servicegroup
[Sysname-obj-grp-service-servicegroup] service tcp source eq 100 destination range 10 100
# Configure a service object with the message type and code for the ICMP service.
<Sysname> system-view
[Sysname] object-group service servicegroup
[Sysname-obj-grp-service-servicegroup] service icmp 100 150
# Configure a service object using object group servicegroup2.
<Sysname> system-view
[Sysname] object-group service servicegroup
[Sysname-obj-grp-service-servicegroup] service group-object servicegroup2
791