group name { enable | disable }

Function

The group name enable command enables a policy group.

The group name disable command disables a policy group.

group name group-name enable

group name group-name disable

Parameter	Description	Value
group-name	Specifies the name of a policy group.	The value must be the name of an existing policy group.

Security policy view

2: Configuration level

A policy group is enabled by default.

A policy rule takes effect only when the policy rule and its policy group are enabled.

# Enable policy group sec_group.

<sysname> system-view
[sysname] security-policy
[sysname-policy-security] group name sec_group enable