R0106-HP MSR Router Series Security Configuration Guide(V7)

389
Configuring object groups
Overview
An object group is a group of objects that can be referenced by an ACL, object policy, or object group
to identify packets. Object groups are divided into the following types:
• IPv4 address object group—A group of IPv4 address objects used to match the IPv4 address in a
packet.
• IPv6 address object group—A group of IPv6 address objects used to match the IPv6 address in a
packet.
• Port object group—A group of port objects used to match the protocol port number in a packet.
• Service object group—A group of service objects used to match the upper-layer service in a packet.
Configuring an IPv4 address object group
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure an IPv4 address
object group and enter its view.
object-group ip address
object-group-name
The system has one default IPv4
address object group.
3. (Optional.) Configure a
description for the IPv4 address
object group.
description text
By default, an object group does
not have a description.
4. Configure an IPv4 address
object.
[ object-id ] network { host
{ address ip-address | name
host-name } | subnet ip-address
{ mask-length | mask } | range
ip-address1 ip-address2 |
group-object object-group-name } }
By default, no object exists.
Configuring an IPv6 address object group
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure an IPv6 address
object group and enter its view.
object-group ipv6 address
object-group-name
The system has one default IPv6
address object group.
3. (Optional.) Configure a
description for the IPv6 address
object group.
description text
By default, an object group does
not have a description.