HP VPN Firewall Appliances Access Control Configuration Guide

60
Ste
p
Command Remarks
5. Add a host IP address or
host name to the object.
• Add a host IP address to the object:
host address ip-address
• Add a host name to the object:
host name host-name
Use either command to add one
type to the object.
By default, a host address object
has no members.
Configuring an address range object
An address range object can comprise only one range of IP addresses. If you execute the range
command multiple times, the most recent configuration takes effect. However, you can execute the range
exclude ip-address command multiple times to exclude multiple IP addresses.
To configure an address range object:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter VD system view.
switchto vd vd-name
Required only when you are first
logged in to the system view of
the default VD and want to
configure an object for a
non-default VD.
3. Create an address range
object and enter address
range object view.
object network range name
By default, no address range
object is configured.
If the object already exists, you
enter its view.
4. Configure a description for
the object.
description description-string
Optional.
By default, no description is
configured for an object.
5. Add a range of IP
addresses to the object.
range { ip-address-start ip-address-end
| exclude ip-address }
By default, an address range
object has no members.
Configuring a subnet address object
A subnet address object can comprise only one subnet address. If you execute the subnet command
multiple times, the most recent configuration takes effect. However, you can execute the subnet exclude
ip-address command multiple times to exclude multiple IP addresses.
To configure a subnet address object:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter VD system view.
switchto vd vd-name
Required only when you are first
logged in to the system view of
the default VD and want to
configure an object for a
non-default VD.