service (audit policy rule view)

Function

The service command configures services to which an audit policy rule applies.

The undo service command deletes services to which an audit policy rule applies.

Format

service { service-name &<1-6> | any }

undo service { service-name &<1-6> | all }

Parameters

Parameter	Description	Value
service-name &<1-6>	Specifies the name of a service or service group.	The specified service or service group must exist. You can add or delete a maximum of six services or service groups at a time.
any	Indicates any service to which an audit policy rule applies.	-
all	Deletes all services to which an audit policy rule applies.	-

Views

Audit policy rule view

Default Level

2: Configuration level

Usage Guidelines

The service/service group referenced in a audit policy can be either a predefined service or user-defined service/service group. You can use the ip service-set command to configure user-defined services/service groups. The system provides predefined services. You can run the display predefined-service command to display details on predefined services.

The audit policies cannot reference the predefined services with dynamic ports, namely, the predefined services whose port is identified as dynamic port.

Example

# Apply audit policy rule policy_audit to service h323.

<sysname> system-view
[sysname] audit-policy
[sysname-policy-audit] rule name policy_audit
[sysname-policy-audit-rule-policy_audit] service h323