HP VPN Firewall Appliances Access Control Command Reference

57
Usage guidelines
A service object can include only one protocol. If you execute the service command multiple times, the
most recent configuration takes effect.
Examples
# Add TCP to service object objectsrv on the default VD, with any source port number and the destination
port number 21.
<Sysname> system-view
[Sysname] object service objectsrv
[Sysname-obj-service-objectsrv] service tcp destination-port 21
# Add ICMP to service object objectecho on VD virdev, with the message type 8 and code 0.
<Sysname> system-view
[Sysname] switchto vd virdev
[Sysname-vsys-virdev] object service objectecho
[Sysname-vsys-virdev-obj-service-objectecho] service icmp 8 0
service-object
Use service-object to add a service object to a service group object or add one service group object to
another service group object.
Use undo service-object object-name to remove a service object or service group object member.
Use undo service-object to restore the default.
Syntax
service-object object-name
undo service-object [ object-name ]
Default
A service group object has no service object or service group object members.
Views
Service group object view
Default command level
2: System level
Parameters
object-name: Specifies the name of an existing service object or service group object, a case-insensitive
string of 1 to 31 characters.
Usage guidelines
A service group object can include multiple service objects and service group objects. To do so, execute
the service-object command multiple times.
Examples
# Add service objects objectsrv1 and objectsrv2 to service group object groupsrv on the default VD.
<Sysname> system-view
[Sysname] object-group service groupsrv
[Sysname-obj-grp-service-groupsrv] service-object objectsrv1