HP VPN Firewall Appliances Access Control Command Reference

64
[Sysname-interzone-office-library-rule-0] destination-mac mac2
display interzone-policy
Use display interzone-policy to display the interzone policy configuration.
Syntax
display interzone-policy [ vd vd-name ] [ source sour-zone-name destination dest-zone-name ] [ | { begin
| exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
vd vd-name: Displays the information of a virtual device (VD) specified by its name, which is a
case-insensitive string of 1 to 20 characters excluding question mark (?), less-than sign (<), greater-than
sign (>), backward slash (\), quotation mark ("), percentage sign (%), apostrophe ('), ampersand (&),
and number sign (#).If no VD is specified, this command displays the information of the default VD,
which is named Root.
source sour-zone-name: Displays the interzone policy information of a source zone specified by its name,
which is a string of 1 to 20 characters. If no source zone is specified, this command displays the
interzone policy configuration of all source zones.
destination dest-zone-name: Displays the information of a destination zone specified by its name, which
is a string of 1 to 41 characters. If no destination zone is specified, this command displays the information
of all destination zones.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Getting Started Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display information of interzone policy rules and interzone policy groups referencing IPv4 basic or
advanced ACLs on the default VD Root.
<Sysname> display interzone-policy
Interzone-policy source office destination library
rule 0 permit logging time-range aaa(Inactive) (1 times matched)
source-ip ip1
destination-ip ip3
service http
source-mac mac1
destination-mac mac2
rule enable
Interzone-policy source trust destination untrust (2 times matched)