rule name (SSL-encrypted traffic detection policy view)

Function

The rule name command creates an SSL-encrypted traffic detection policy rule and enters the SSL-encrypted traffic detection policy rule view.

The undo rule command removes an SSL-encrypted traffic detection policy rule.

Format

rule name rule-name

undo rule { name rule-name | id rule-id | all }

Parameters

Parameter	Description	Value
rule-name	Indicates the name of the SSL-encrypted traffic detection policy rule.	The value is a case-sensitive string. If the name does not contain any space, the length ranges from 1 to 32. If the name contains spaces, the name must be quoted by double quotation marks, for example, "policy for test", and the length ranges from 3 to 34. The name cannot contain any question marks (?) and quotation marks (").
id rule-id	Specifies the ID of the SSL-encrypted traffic detection policy rule to be deleted. You can run the display decryption-policy rule all command to view the ID of rules to be deleted.	The SSL-encrypted traffic detection policy rule ID must exist.
all	Indicates all SSL-encrypted traffic detection policy rules.	-

Parameter

Description

Value

rule-name

Indicates the name of the SSL-encrypted traffic detection policy rule.

The value is a case-sensitive string. If the name does not contain any space, the length ranges from 1 to 32. If the name contains spaces, the name must be quoted by double quotation marks, for example, "policy for test", and the length ranges from 3 to 34. The name cannot contain any question marks (?) and quotation marks (").

id rule-id

Specifies the ID of the SSL-encrypted traffic detection policy rule to be deleted.

You can run the display decryption-policy rule all command to view the ID of rules to be deleted.

The SSL-encrypted traffic detection policy rule ID must exist.

all

Indicates all SSL-encrypted traffic detection policy rules.

Views

SSL-encrypted traffic detection policy view

Default Level

2: Configuration level

Usage Guidelines

In hot backup and cross-DC cluster scenarios, the rule IDs on devices may be different. The undo rule id rule-id command will not be synchronized to other devices. You are advised to delete rules by name. If you want to delete rules by ID, find the rule name based on the ID of the rule to be deleted on the local device and delete the rule with the same name on other devices to ensure configuration consistency. Before running the undo rule id rule-id command, run the hrp standby config enable command in the hot backup scenario and run the cluster standby config enable command in the cross-DC cluster scenario.

Example

# Create SSL-encrypted traffic detection policy rule policy_sec.

<sysname> system-view
[sysname] decryption-policy 
[sysname-policy-decryption] rule name policy_sec
[sysname-policy-decryption-rule-policy_sec]