destination-address (proxy policy rule view)

Function

The destination-address command sets the destination addresses to which a proxy policy rule applies.

The undo destination-address command deletes the destination addresses to which a proxy policy rule applies.

Format

destination-address { address-set address-set-name &<1-6> | domain-set domain-set-name &<1-6> | ipv4-address { ipv4-mask-length | mask mask-address | wildcard } [ description description ] | range ipv4-start-address ipv4-end-address [ description description ] | any }

undo destination-address { address-set address-set-name &<1-6> | domain-set domain-set-name &<1-6> | ipv4-address { ipv4-mask-length | mask mask-address | wildcard } [ description ] | range ipv4-start-address ipv4-end-address [ description ] | all }

Parameters

Parameter	Description	Value
address-set address-set-name &<1-6>	Specifies the name of an address or address group.	The specified address or address group must exist and does not contain IPv6 address. You can add or delete a maximum of six addresses or address groups at a time.
domain-set domain-set-name &<1-6>	Specifies the name of a domain group.	The value must be the name of an existing domain group. You can reference or cancel the reference of a maximum of six domain groups at a time. NOTE: When an IP address corresponds to multiple domain names, an IP address can be used to search for a maximum of 16 domain names. If the domain name to be searched is not in the policy rule, the policy cannot be matched. You are advised to configure multiple domain names with the same IP address in the same policy rule.
ipv4-address	Specifies the IPv4 address.	The value is in dotted decimal notation.
ipv4-mask-length	Specifies the mask of an IPv4 address.	The value is an integer ranging from 1 to 32.
mask mask-address	Specifies the mask of an IPv4 address.	The value is in dotted decimal notation whose binary form cannot be inconsecutive. For example, 255.0.255.0 is not a legitimate wildcard because its binary form is 11111111.00000000.11111111.00000000. In the binary form, digits 1 are to be matched, whereas digits 0 are not. For example, 192.168.1.1/255.0.255.0 indicates that only IP addresses of the 192..1. form are to be matched.
wildcard	Specifies the wildcard of an IPv4 address.	The value is in dotted decimal notation whose binary form cannot be inconsecutive. For example, 0.255.0.255 is not a legitimate wildcard because its binary form is 00000000.11111111.00000000.11111111. In the binary form, digits 0 are to be matched, whereas digits 1 are not. For example, 192.168.1.1/0.255.0.255 indicates that only IP addresses of the 192..1. form are to be matched.
description description	Specifies the description of an individual IPv4/IPv6 address or address segment.	The value is a string of 1 to 128 characters.
range	Indicates the address range.	-
ipv4-start-address	Specifies the start address of an IPv4 address range.	The value is in dotted decimal notation.
ipv4-end-address	Specifies the end address of an IPv4 address range.	The value is in dotted decimal notation.
any	Indicates any destination address.	-
all	Deletes all destination addresses to which a proxy policy rule applies.	-

Views

Proxy policy rule view

Default Level

2: Configuration level

Usage Guidelines

None

Example

# Set the destination address in the proxy policy rule view.

<sysname> system-view
[sysname] proxy-policy
[sysname-policy-proxy] rule name policy_proxy
[sysname-policy-proxy-rule-policy_proxy] destination-address 10.1.1.1 24