group move (security policy view)

Function

The group move command moves a policy group, which changes the priority of the policy group and the policy rules in the policy group.

group move group-name1 { after | before } { group group-name2 | rule rule-name }

Parameter	Description	Value
group-name1	Specifies the name of the policy group to be moved. The policy group to be moved cannot be empty.	The value must be the name of an existing policy group.
after	Moves group-name1 after group-name2 or rule-name.	-
before	Moves group-name1 before group-name2 or rule-name.	-
group group-name2	Specifies the name of the reference policy group. The reference policy group cannot be empty.	The value must be the name of an existing policy group.
rule rule-name	Specifies the name of the reference policy rule.	The value must be the name of an existing policy rule.

Security policy view

2: Configuration level

When you move a policy group, policy rules in the policy group are also moved.

If the reference policy rule has been added to another policy group, the policy group moving is affected by the following rules:

If the reference policy rule resides in the middle of the new policy group, the policy group to be moved cannot be moved.
If the reference policy rule resides in the front of the new policy group, the policy group to be moved is moved to the position in front of the reference policy rule.
If the reference policy rule resides in the back of the new policy group, the policy group to be moved is moved to the position behind the reference policy rule.

# Move policy group group1 to before policy rule rule1.

<sysname> system-view
[sysname] security-policy
[sysname-policy-security] group move group1 before rule test2