HP VPN Firewall Appliances Access Control Command Reference

35
Address resource commands
On a virtual device (VD), you can configure different categories of objects, and configure multiple
objects for each category. Each object on a VD is uniquely identified by its name. For more information
about VDs, see "Configuring VDs." For more information about the switchto vd command, see System
Management and Maintenance Configuration Guide.
One group object might comprise other group objects, and a member group object might also comprise
other group objects. However, no further iteration is allowed and a group object cannot be a member of
itself. For example, if object object3 is a member of group object object2, which is a member of group
object object1, object3 cannot be a group object and object1 cannot be a member of object2.
Only IPv4 addresses are supported.
description
Use description to configure a description for an object.
Use undo description to delete the description for an object.
Syntax
description description-string
undo description
Default
No description is configured for an object.
Views
Host address object view, address range object view, subnet address object view, MAC address object
view, service object view, IP address group object view, MAC address group object view, service group
object view
Default command level
2: System level
Parameters
description-string: Specifies a description for an object, a case-sensitive string of 1 to 31 characters.
Examples
# Configure the description object for host address object objectaddr on the default VD.
<Sysname> system-view
[Sysname] object network host objectaddr
[Sysname-object-network-objectaddr] description object
# Configure the description object for host address object objectaddr on VD virdev.
<Sysname> system-view
[Sysname] switchto vd virdev
[Sysname-vsys-virdev] object network host objectaddr
[Sysname-vsys-virdev-object-network-objectaddr] description object