505
Predefined user roles
network-admin
Parameters
Object-id: Specifies an object ID in the range of 0 to 4294967294. If you do not specify an object ID, the
system automatically assigns the object a multiple of 10 next to the greatest ID being used. For example,
if the greatest ID is 22, the system automatically assigns 30.
host: Configures an IPv4 address object with the host address or name.
address ip-address: Specifies an IPv4 host address.
name
host-name: Specifies a host name, a case-insensitive string of 1 to 60 characters.
subnet ip-address { mask-length | mask }: Configures an IPv4 address object with the subnet address
followed by a mask length in the range of 0 to 32 or a mask in dotted decimal notation.
range ip-address1 ip-address2: Configures an IPv4 address object with the address range starting with
ip-address1 and ending with ip-address2
group-object object-group-name: Specifies an IPv4 address object group to be referenced by its name,
a case-insensitive string of 1 to 31 characters.
Usage guidelines
This command fails if you use it to configure or change an IPv4 address object to be identical with an
existing object.
This command creates an IPv4 address object if the specified object ID does not exist. Otherwise, the
command overwrites the configuration of the specified object.
If you configure a subnet with the mask length of 32 or the mask of 255.255.255.255, the system
configures the object with a host address.
When you use the range ip-address1 ip-address2 option, follow these guidelines:
• If ip-address1 is equal to ip-address2, the system configures the object with a host address.
• If ip-address1 is not equal to ip-address2, the system compares the two IPv4 addresses, configures
a range starting with the lower IPv4 address, and performs the following operations:
{ Configures the object with an address range if the two addresses are in different subnets.
{ Configures the object with a subnet address if the two addresses are in the same subnet.
When you use the group-object object-group-name option, follow these guidelines:
• The object group to be referenced must be an IPv4 address object group.
• If the specified object group does not exist, the system creates an IPv4 address object group with the
name you specified and references the object group for the object.
• Two object groups cannot reference each other at the same time.
• The system supports up to five reference hierarchy layers. For example, if groups 1, 2, 3, 4, and 5
reference groups 2, 3, 4, 5, and 6, respectively, group 6 cannot reference another group and
group 1 cannot be referenced by another group.
Examples
# Configure an IPv4 address object with the host address of 192.168.0.1.
<Sysname> system-view
[Sysname] object-group ip address ipgroup
[Sysname-obj-grp-ip-ipgroup] network host address 192.168.0.1