Service (Service Object Group View) - H3C MSR Series Command Reference Manual

service (service object group view)

Use service to configure a service object.
Use undo service to delete a service object.
Syntax
[ object-id ] service { protocol [ { source { { eq | lt | gt } port | range port1 port2 } | destination { { eq
| lt | gt } port | range port1 port2 } } * | icmp-type icmp-code | icmpv6-type icmpv6-code ] |
group-object object-group-name }
undo service { protocol [ { source { { eq | lt | gt } port | range port1 port2 } | destination { { eq | lt |
gt } port | range port1 port2 } } * | icmp-type icmp-code | icmpv6-type icmpv6-code ] | group-object
object-group-name }
undo object-id
Default
No service objects exist.
Views
Service object group view
Predefined user roles
network-admin
Parameters
object-id: Configures an object ID in the range of 0 to 4294967294. If you do not configure an ID for
the object, the system automatically assigns the object a multiple of 10 next to the greatest ID being
used. For example, if the greatest ID is 22, the automatically assigned ID is 30.
protocol: Configures the protocol number in the range of 0 to 255, or the protocol name such as TCP,
UDP, ICMP, and ICMPv6.
source: Configures a service object with a source port when the protocol is TCP or UDP.
destination: Configures a service object with a destination port when the protocol is TCP or UDP.
eq: Configures a port equal to the specified port.
lt: Configures a port smaller than the specified port.
gt: Configures a port greater than the specified port.
port: Specifies a port number in the range of 0 to 65535.
range port1 port2: Configures a service object with a port range. The value range for the port1 and
port2 arguments is 0 to 65535.
icmp-type: Configures the ICMP message type in the range of 0 to 255.
icmp-code: Configures the ICMP message code in the range of 0 to 255.
icmpv6-type: Configures the ICMPv6 message type in the range of 0 to 255.
icmpv6-code: Configures the ICMPv6 message code in the range of 0 to 255.
group-object object-group-name: Specifies a service object group by its name, a case-insensitive
string of 1 to 31 characters.
Usage guidelines
This command fails if you use it to configure or change a service object to be identical with an
existing object.
This command creates a service object if the specified object ID does not exist. Otherwise, the
command overwrites the configuration of the specified object.
951