Rule (Ipv4 Object Policy View) - H3C MSR Series Command Reference Manual

Parameters
source source-zone-name: Specifies the source security zone name, a case-insensitive string of 1
to 31 characters.
destination
case-insensitive string of 1 to 31 characters.
ip: Clears statistics for IPv4 object policies.
ipv6: Clears statistics for IPv6 object policies.
Usage guidelines
If you do not specify a zone pair, the system clears statistics for the object policies applied to all zone
pairs.
If you specify neither the ip keyword nor the ipv6 keyword, the system clears statistics for all object
policies applied to the specified zone pairs.
Examples
# Clear statistics for all IPv4 object policies applied to the zone pair with source security zone office
and destination security zone library.
<Sysname> reset object-policy statistics zone-pair security source office destination
library ip
Related commands
display object-policy statistics zone-pair security

rule (IPv4 object policy view)

Use rule to configure a rule for an IPv4 object policy.
Use undo rule to partially or completely delete a rule for an IPv4 object policy.
Syntax
rule [ rule-id ] { drop | pass | inspect app-profile-name } [ [ source-ip { object-group-name | any } ]
[ destination-ip { object-group-name | any } ] [ service { object-group-name | any } ] [ vrf vrf-name ]
[ application application-name ] [ app-group app-group-name ] [ counting ] [ disable ] [ logging ]
[ time-range time-range-name ] ] *
undo rule rule-id [ source-ip | destination-ip | service | vrf | application | app-group | counting |
disable | logging | time-range ] *
Default
No rules are configured for an IPv4 object policy.
Views
IPv4 object policy view
Predefined user roles
network-admin
Parameters
rule-id: Specifies a rule ID in the range of 0 to 65534. If you do not specify an ID for the rule, the
system automatically assigns the rule an integer next to the greatest ID being used. For example, if
the greatest ID is 60000, the system automatically assigns 60001. If the greatest ID is 65534, the
system assigns the rule the smallest unused number in the range.
drop: Discards the packets that match the rule.
pass: Allows the packets that match the rule to pass.
destination-zone-name: Specifies the destination
964
security zone name, a