Display Object-Policy Zone-Pair Security - H3C MSR Series Command Reference Manual

Field
x packets,y bytes
Related commands
reset object-policy statistics

display object-policy zone-pair security

Use display object-policy zone-pair security to display information about the object policies
applied to zone pairs.
Syntax
display object-policy
destination-zone-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
source source-zone-name: Specifies a source security zone name, a case-insensitive string of 1 to
31 characters.
destination destination-zone-name: Specifies a destination security zone name, a case-insensitive
string of 1 to 31 characters.
Usage guidelines
If you do not specify a zone pair, the system displays information about the object policies applied to
all zone pairs.
Examples
# Display information about the object policies applied to all zone pairs.
<Sysname> display object-policy zone-pair security
Zone-pair source office destination library
object-policy apply ip permit
object-policy apply ipv6 drop
Table 151 Command output
Field
Zone-pair source office destination library
object-policy apply ip permit
object-policy apply ipv6 drop
Description
The rule has matched x packets, a total of y bytes. This field
is displayed only when the following conditions exist:
•
The counting or logging keyword is specified in the
rule command.
•
The rule has been matched.
zone-pair security
Description
Name of the zone pair.
Name of the IPv4 object policy applied to the zone pair.
Name of the IPv6 object policy applied to the zone pair.
959
[ source source-zone-name destination