HP VPN Firewall Appliances Access Control Command Reference

56
Parameters
object-group-name: Specifies the object name, a case-insensitive string of 1 to 31 characters.
Examples
# Create service group object groupsrv on the default VD.
<Sysname> system-view
[Sysname] object-group service groupsrv
# Create service group object groupsrv on VD virdev.
<Sysname> system-view
[Sysname] switchto vd virdev
[Sysname-vsys-virdev] object-group service groupsrv
service
Use service to add a protocol to a service object.
Use undo service to restore the default.
Syntax
service { protocol | icmp icmp-type icmp-code | { tcp | udp } [ source-port source-port-start
[ source-port-end ] ] [ destination-port destination-port-start [ destination-port-end ] ] }
undo service
Default
A user-defined service object includes no protocol.
Views
Service object view
Default command level
2: System level
Parameters
protocol: Specifies a protocol number in the range of 0 to 255. It cannot be 1, 6, or 17.
icmp icmp-type icmp-code: Specifies the ICMP protocol. Arguments icmp-type and icmp-code indicate
the ICMP message type and code, both in the range of 0 to 255.
tcp: Specifies the TCP protocol.
udp: Specifies the UDP protocol.
source-port source-port-start [ source-port-end ]: Specifies a TCP or UDP source port or a range of source
ports. If you do not specify this option, the command applies to all source ports. A source port number
must be in the range of 0 to 65535, and the end source port number must be higher than the start source
port number.
destination-port destination-port-start [ destination-port-end ]: Specifies a TCP or UDP destination port or
a range of destination ports. If you do not specify this option, the command applies to all destination
ports. A destination port number must be in the range of 0 to 65535, and the end destination port
number must be higher than the start destination port number.