H3C MSR Series Command Reference Manual page 990
Comware 7 security
Hide thumbs
Also See for MSR Series:
- Command reference manual (174 pages) ,
- Configuration manual (80 pages) ,
- Manual (33 pages)
Table of Contents
Advertisement
Default
No rules are configured for an IPv6 object policy.
Views
IPv6 object policy view
Predefined user roles
network-admin
Parameters
rule-id: Specifies a rule ID in the range of 0 to 65534. If you do not specify an ID for the rule, the
system automatically assigns the rule an integer next to the greatest ID being used. For example, if
the greatest ID is 60000, the system automatically assigns 60001. If the greatest ID is 65534, the
system assigns the rule the smallest unused number in the range.
drop: Discards the packets that match the rule.
pass: Allows the packets that match the rule to pass.
inspect app-profile-name: Applies a DPI application profile to the packets that match the rule. The
app-profile-name argument represents the DPI profile name, a case-insensitive string of 1 to 100
characters. The string can contain only letters, digits, and underscores (_).
The following matrix shows the inspect app-profile-name option and hardware compatibility:
Hardware
MSR810/810-W/810-W-DB/810-LM/810-W-LM/810-
10-PoE/810-LM-HK/810-W-LM-HK
MSR2600-10-X1
MSR 2630
MSR3600-28/3600-51
MSR3600-28-SI/3600-51-SI
MSR3610-X1/3610-X1-DP/3610-X1-DC/3610-X1-D
P-DC
MSR 3610/3620/3620-DP/3640/3660
MSR5620/5660/5680
source-ip object-group-name: Specifies a source IPv6 address object group by its name, a
case-insensitive string of 1 to 31 characters.
source-ip any: Specifies all source IPv6 address object groups.
destination-ip object-group-name: Specifies a destination IPv6 address object group by its name, a
case-insensitive string of 1 to 31 characters.
destination-ip any: Specifies all destination IPv6 address object groups.
service object-group-name: Specifies a service object group by its name, a case-insensitive string of
1 to 31 characters.
service any: Specifies all service object groups.
vrf vrf-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31
characters. If you do not specify this option, the command applies to packets of the public network.
application application-name: Specifies an application by its name, a case-insensitive string of 1 to
63 characters. The invalid and other applications are not supported.
Option compatibility
Yes
Yes
Yes
Yes
No
Yes
Yes
Yes
967
Advertisement
Table of Contents
