vt-policy

Function

The vt-policy command adds the policy based on source IP addresses to a virtual gateway.

The undo vt-policy command deletes the policy based on source IP addresses from a virtual gateway.

Format

vt-policy { deny | permit } { ip mask | address-range start-ip end-ip }

undo vt-policy { deny | permit } { ip mask | address-range start-ip end-ip }

Parameters

Parameter	Description	Value
deny	Denies the matching packets to pass.	-
permit	Permits the matching packets to pass.	-
ip	Specifies the IP address.	The value is in dotted decimal notation.
mask	Specifies a subnet mask.	The value is in dotted decimal notation.
address-range start-ip end-ip	Specifies the IP address range.	The value is in dotted decimal notation.

Views

Security view

Default Level

2: Configuration level

Usage Guidelines

The vt-policy command limits the client IP addresses that access a virtual gateway. When the client IP addresses are set as denying the access to a virtual gateway, users cannot log in the virtual gateway.

Example

# Allow the client with IP address 10.1.1.1 and subnet mask 255.255.255.0 to access the virtual gateway.

<sysname> system-view
[sysname] v-gateway abc
[sysname-abc] security
[sysname-abc-security] vt-policy permit 10.1.1.1 255.255.255.0