service (authentication policy rule view)

Function

The service command sets a service for the authentication policy rule.

The undo service command deletes the service set for the authentication policy rule.

Format

service { service-name &<1-6> | any }

undo service { service-name &<1-6> | all }

Parameters

Parameter	Description	Value
service-name &<1-6>	Specifies the name of a service or service group.	The value must be the name of an existing service or service group. Up to six services (service groups) can be set or deleted each time for an authentication policy rule.
any	Indicates any service.	-
all	Deletes all services from the authentication policy rule.	-

Views

Authentication policy rule view

Default Level

2: Configuration level

Usage Guidelines

Services or service groups referenced by authentication policies can be user-defined services or service groups or predefined services. The ip service-set command is used to configure user-defined services or service groups. You can run the display predefined-service command to view predefined services.

Authentication policies cannot reference the OSPF, BGP, bootpc, bootps, DNS, or DNS-TCP service or the service group that contains any unsupported service.

Example

# Set the service h323 for the authentication policy rule.

<sysname> system-view
[sysname] auth-policy
[sysname-policy-auth] rule name auth3
[sysname-policy-auth-rule-auth3] service h323