rule port

Function

The rule port command configures a rule for checking ports to check opened ports on the user terminal.

Format

rule rule-name port port-list { required | deny }

Parameters

Parameter	Description	Value
rule-name	Specifies the name of the rule.	The value is a string of 1 to 63 case-sensitive characters.
port-list	Specifies the port. It can specify both the port range such as 80 to 90 and multiple port ranges or ports such as 1, 2, and 3 to 5.	The value is a string of 1 to 127 characters and supports characters ranging from 0 to 9, comma (,), and en dash (-). The UDP and TCP ports are not differentiated.
required	Indicates that the user terminal, these ports of which are opened, is allowed to pass the rule check.	-
deny	Indicates that the user terminal, these ports of which are opened, is not allowed to pass the rule check.	-

Views

Eps-policy view

Default Level

2: Configuration level

Usage Guidelines

None

Example

# Configure the rule for checking ports as rule1. If any of the ports among the ports 80 to 85 and 95 is opened on a user terminal, the user terminal cannot pass the rule check.

<sysname> system-view
[sysname] v-gateway abc
[sysname-abc] hostchecker
[sysname-abc-hostchecker] eps-policy policy1
[sysname-abc-hostchecker-policy1] rule rule1 type port
[sysname-abc-hostchecker-policy1] rule rule1 port 80-85,95 deny