action (security policy rule view)

Function

The action command configures the action in the security policy rule.

Format

action { permit | deny }

Parameters

Parameter	Description	Value
permit	Indicates that the traffic that matches the rule is permitted.	-
deny	Indicates that the traffic that matches the rule is denied.	-

Views

Security policy rule view

Default Level

2: Configuration level

Usage Guidelines

The security policy rule that has no action configured does not take effect.

Example

# Set action permit for security policy rule policy_sec.

<sysname> system-view
[sysname] security-policy
[sysname-policy-security] rule name policy_sec
[sysname-policy-security-rule-policy_sec] action permit