F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Configuration Guide-6PW100

63
Ste
p
Command Remarks
2. Enter VD system view.
switchto vd vd-name
Required only when you are first
logged in to the system view of
the default VD and want to
configure an object for a
non-default VD.
3. Create a subnet address
object and enter subnet
address object view.
object network subnet name
By default, no subnet address
object is configured.
If the object already exists, you
enter its view.
4. Configure a description for
the object.
description description-string
Optional.
By default, no description is
configured for an object.
5. Add a subnet IP address to
the object.
subnet { net-address wildcard-mask |
exclude ip-address }
By default, a subnet address
object has no members.
145BConfiguring an IP address group object
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter VD system view.
switchto vd vd-name
Required only when you are first logged in to
the system view of the default VD and want to
configure an object for a non-default VD.
3. Create an IP address
group object and enter IP
address group object view.
object-group network
object-group-name
By default, no IP address group object is
configured.
If the object already exists, you enter its view.
4. Configure a description for
the object.
description
description-string
Optional.
By default, no description is configured for
an object.
5. Add an IP address object
or another IP address
group object to the object.
network-object object-name
By default, an IP address group object has
no IP address object or IP address group
object members.
The IP address object or IP address group
object member must already exist.
An IP address group object can comprise
multiple IP address object and IP address
group object members. To add multiple
members, execute this command multiple
times.
146BConfiguring a MAC address object
Ste
p
Command Remarks
1. Enter system view.
system-view N/A