H3C MSR Series Command Reference Manual page 968

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

Predefined user roles
network-admin
Parameters
object-id: Specifies an object ID in the range of 0 to 4294967294. If you do not configure an object ID,
the system automatically assigns the object a multiple of 10 next to the greatest ID being used. For
example, if the greatest ID is 22, the system automatically assigns 30.
host: Configures an IPv6 address object with the host address or name.
address ipv6-address: Specifies an IPv6 host address.
name host-name: Specifies a host name, a case-insensitive string of 1 to 60 characters.
subnet ipv6-address prefix-length: Configures an IPv6 address object with the subnet address
followed by the prefix length in the range of 1 to 128.
range ipv6-address1 ipv6-address2: Configures an IPv6 address object.
group-object object-group-name: Specifies an IPv6 address object group by its name, a
case-insensitive string of 1 to 31 characters.
Usage guidelines
This command fails if you use it to configure or change an IPv6 address object to be identical with an
existing object.
This command creates an IPv6 address object if the specified object ID does not exist. Otherwise,
the command overwrites the configuration of the specified object.
If you configure a subnet address with the prefix length of 128, the system configures the object with
a host address.
When you use the range ipv6-address1 ipv6-address2 option, follow these guidelines:
If ipv6-address1 is equal to ipv6-address2, the system configures the object with a host
address.
If ipv6-address1 is not equal to ipv6-address2, the system compares the two IPv6 addresses,
configures a range starting with the lower IPv6 address, and performs the following operations:
Configures the object with an address range if the two addresses are in different subnets.
Configures the object with a subnet address if the two addresses are in the same subnet.
When you use the group-object object-group-name option, follow these guidelines:
The object group to be used must be an IPv6 address object group.
If the specified object group does not exist, the system creates an IPv6 address object group
with the name you specified and uses the object group for the object.
Two object groups cannot use each other at the same time.
The system supports a maximum of five object group hierarchy layers. For example, if groups 1,
2, 3, and 4 use groups 2, 3, 4, and 5, respectively, group 5 cannot use another group and group
1 cannot be used by another group.
Examples
# Configure an IPv6 address object with the host address of 1::1.
<Sysname> system-view
[Sysname] object-group ipv6 address ipv6group
[Sysname-obj-grp-ipv6-ipv6group] network host address 1::1
# Configure an IPv6 address object with the host name of pc3.
<Sysname> system-view
[Sysname] object-group ipv6 address ipv6group
[Sysname-obj-grp-ipv6-ipv6group] network host name pc3
945

Advertisement

Table of Contents
loading

Table of Contents