因为,cl网络和信息港网络相通,信息港作为cl外网服务,所以120UIAPI地址作为白名单放行避免影响策略下发。
This commit is contained in:
@@ -32,14 +32,14 @@ SecurityPolicy-Allow-Http-00002
|
||||
insert_policyId_to_file1 allow_http_objectId1 ${objectId}
|
||||
insert_policyId_to_file1 allow_http_policyId1 ${policyId}
|
||||
|
||||
SecurityPolicy-Allow-Http-00003
|
||||
[Tags] cat完整匹配
|
||||
Comment 创建fqdn
|
||||
${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=$192.168.40.120
|
||||
${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
||||
Comment 创建安全策略
|
||||
${policyDict} Create Dictionary policyName=SecurityPolicy-Allow-Http-00003 policyType=tsg_security policyDesc=autotest action=allow userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
|
||||
log ${policyDict}
|
||||
${rescode} ${policyId} AddPolicies 1 ${policyDict} v2
|
||||
insert_policyId_to_file1 allow_http_objectId2 ${objectId}
|
||||
insert_policyId_to_file1 allow_http_policyId2 ${policyId}
|
||||
#SecurityPolicy-Allow-Http-00003
|
||||
# [Tags] cat完整匹配
|
||||
# Comment 创建fqdn
|
||||
# ${objectDict} Create Dictionary objectType=fqdn_category isValid=${1} addItemList=$192.168.40.120
|
||||
# ${rescode} ${objectId} AddObject2 ${1} ${objectDict}
|
||||
# Comment 创建安全策略
|
||||
# ${policyDict} Create Dictionary policyName=SecurityPolicy-Allow-Http-00003 policyType=tsg_security policyDesc=autotest action=allow userRegion={"protocol":"HTTP"} filterList=${objectId}|TSG_FIELD_HTTP_HOST isValid=${1} appIdObjects=2
|
||||
# log ${policyDict}
|
||||
# ${rescode} ${policyId} AddPolicies 1 ${policyDict} v2
|
||||
# insert_policyId_to_file1 allow_http_objectId2 ${objectId}
|
||||
# insert_policyId_to_file1 allow_http_policyId2 ${policyId}
|
||||
|
||||
Reference in New Issue
Block a user