Changing the rule match order

The device matches packets against object policy rules in the order the rules were configured. You can change the rule match order by changing the position of an object policy rule in the rule list.

To change the rule match order:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enter object policy view.

  • Enter IPv4 object policy view:object-policy ip object-policy-name

  • Enter IPv6 object policy view:object-policy ipv6 object-policy-name

N/A

3. Move an object policy rule.

move rule rule-id before insert-rule-id

N/A