Displays the syntax of the specified policy attribute.
attr | Specifies the attribute check. |
N/A.
Use this command to display the syntax of policy attributes. The command displays any additional keywords to use with this attribute, and the types of values expected.
Policy attributes are used in the rule entries that make up a policy file.
For each attribute, this command displays which applications use the attribute, and whether the attribute is a match condition or a set (action, action modifier) condition.
The syntax display does not show the text synonyms for numeric entries. For example, the icmp-type match condition allows you to specify either an integer or a text synonym for the condition. Specifying icmp-type 8 or icmp-type echo-request are equivalent, but the syntax display shows only the numeric option.
Note
The syntax displayed is used by the policy manager to verify the syntax of policy files. The individual applications are responsible for implementing the individual attributes. Inclusion of a particular policy attribute in this command output does not imply that the attribute has been implemented by the application. See the documentation of the particular application for detailed lists of supported attributes.The following example displays the syntax of the policy attribute icmp-type:
check policy attribute icmp-type
The following is sample output for this command:
( match ) ( ACL ) icmp-type <uint32 val>
This command was first available in ExtremeXOS 11.1.