F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

<Sysname> display interzone-policy accelerate source office destination library

S(Status): UTD -- up to date, OOD -- out of date

A(Accelerate): ACC -- accelerated, UNACC -- unaccelerated

Source-Zone Destination-Zone A S

--------------------------------------------------------------------------

office library ACC OOD

Table 19 Command output

Field Descri

tion

Source-Zone Name of the source zone.

Destination-Zone Name of the destination zone.

Interzone policy acceleration status:

• ACC—Acceleration is enabled.

• UNACC—Acceleration is disabled.

Whether interzone policy acceleration is using up to date criteria for rule matching:

• UTD—The interzone policy criteria are up to date and have not changed since interzone

policy acceleration was enabled.

• OOD—The interzone policy criteria are out of date. This state is displayed, if you have

modified the interzone policy after interzone policy acceleration was enabled. Interzone

policy acceleration matches packets still against the old criteria. To ensure correct packet

matching, disable and re-enable interzone policy acceleration.

move rule

Use move rule to move an interzone policy rule.

Syntax

move rule rule-id before insert-rule-id

Views

Interzone instance view

Default command level

2: System level

Parameters

rule-id: Specifies the ID of the interzone policy rule to be moved. This argument ranges from 0 to 65534.

insert-rule-id: Specifies the ID of the rule before which the rule specified by rule-id is placed. This

argument ranges from 0 to 65535. To move the rule to the end, set this argument to 65535.

Usage guidelines

When the insert-rule-id argument is the same as the rule-id argument or any of the rules specified by the

two arguments does not exist, no operation is performed.

Examples

# Move interzone policy rule 5 before rule 2 for the interzone instance with source zone office and

destination zone library.