Policy Modify - Zte ZXR10 8900 Series Command Manual

Example
Command
Function
Command Format
Parameter
Description
Parameter
log
on|off| alarm
enable
yes|no
before
<number>
To add one access control rule, execute the following command:
policy add action accept srcarea 'area_gei_5/1' src
'any' service IP dpi 'http_policy' ar 'msn' av on
log on
enable yes vsid 0

policy modify

This command is used to modify one added access control rule.
policy modify id <number1>[action <accept|deny>][srcarea
<string1>][dstarea
<string4>][src <string5>][dst
ing7>][schedule
<string10>][dpi
permanent <on|off>][log <on|off>][enable < yes|no>]
Parameter
modify
id
<number1>
action
accept|deny
srcarea
<string1>
dstarea
Confidential and Proprietary Information of ZTE CORPORATION
Description
This is optional. It sets whether to record the
event in log or prompt alarm message when a
packet matches rule. It doesn't record event
into log by default.
This records the event into log/doesn't record
the event into log/generates alarm.
This is optional, indicating whether to enable
this rule. The rule is enabled by default.
Enable/Disable
This is optional. When adding one new access
control rule, it is available to select before
which rule to place this new rule. The new
rule is placed at end by default.
This is one number, indicating ID of added
access control rule.
<string2>][srcvlan
<string6>][service
<string8>][sport
<string11>][ar<string12>][av<on|off>][
Description
This modifies one FW access rule.
This is ID of defined access control rule.
This is one number.
This sets access right.
permit/deny
This sets source area.
This is one string. It must be one or more
preset area name(s). As for multiple area
names, space is used between each two area
names and all addresses are quoted with
single quotes, such as 'area_gei_5/1'.
This sets destination area.
Chapter 6 policy (firewall)
<string3>][dstvlan
<str
<string9>][orig_dst
71