Move Rule; Object-Policy Apply Ip - H3C MSR Series Command Reference Manual

move rule

Use move rule to change the rule match order of a rule in an object policy.
Syntax
move rule rule-id before insert-rule-id
Views
Object policy view
Predefined user roles
network-admin
Parameters
rule-id: Specifies a rule by its ID in the range of 0 to 65534.
insert-rule-id: Specifies the ID of the target rule before which a rule is inserted. The target rule ID is in
the range of 0 to 65535. If you specify 65535 as the target rule ID, the rule is moved to the end of the
list.
Usage guidelines
The system does not execute the command in the following situations:
•
You specify the same value for the rule-id and insert-rule-id arguments.
•
You specify a nonexistent rule.
Examples
# Insert rule 5 before rule 2 for IPv4 object policy permit.
<Sysname> system-view
[Sysname] object-policy ip permit
[Sysname-object-policy-ip-permit] move rule 5 before 2
Related commands
object-policy apply ipv6
object-policy ip
rule (IPv4 object policy view)
rule (IPv6 object policy view)

object-policy apply ip

Use object-policy apply ip to apply an IPv4 object policy to a zone pair.
Use undo object-policy apply ip to restore the default.
Syntax
object-policy apply ip object-policy-name
undo object-policy apply ip object-policy-name
Default
IPv4 object policies are not applied to a zone pair.
Views
Zone pair view
960