H3C Technologies H3C Intelligent Management Center - Manual (Page 621)

607
• Rule Type: This field is displayed only when the rule type is Advanced.
• Operation: Contains the operation mode of the rule, Check or Check and Get. The Check operation
only checks the configuration file content. The Check and Get operation checks the configuration
file content and gets relevant parameters according to the rule. When the check type is Link or
Aggregate Link, the Check and Get operation gets relevant parameters according to the rule and
compares the parameters to predefined values according to the comparison mode to check
whether the device configuration matches the compliance policy. For other check types, the Check
and Get operation only gets relevant parameters and displays them in the Configuration Retrieval
Report.
The following describes the configuration items for basic and advanced rules respectively.
Basic
• Rule Type: Contains the rule type.
• Match Mode:
{
Loose Match: In this mode, a match occurs when the content in the configuration file or display
command output contains the content in the rule.
{
Negative Loose Match: In this mode, a match occurs when the content in the configuration file
or display command output does not contain the content in the rule.
{
Strict Match: In this mode, a match occurs only if the content in the configuration file or display
command output appears in the same order as specified in the rule.
{
Negative Strict Match: In this mode, a match occurs only if the content in the configuration file
or display command output does not appear in the same order as specified in the rule.
• Match Patterns: IMC compares the match patterns to the configuration content on the device, and
determines whether the device violates the rule according to the match mode.
Advanced
When the rule contains only one match pattern, the following are displayed.
• Rule Type: Contains the type of the rule.
• Operation: Contains the operation mode of rule, Check or Check and Get.
• Match Patterns: Contains the content of the rule or regular expression.
• When the rule contains multiple match patterns, the following are displayed.
• Rule Relation: AND or OR, displayed only when the rule type is Advanced. If the rule relation is
AND, the two adjacent patterns must both comply with the policy. If the rule relation is OR, only one
of the two adjacent patterns must comply with the policy.
• Rule Content Configuration: Included or Excluded, displayed only when the check type is Device,
Interface, or Configuration Segment.
{
Included: A match occurs if the device configuration contains the match patterns of the rule.
{
Excluded: A match occurs if the device configuration does not contain the match patterns of the
rule.
• Match Criteria: Displayed when the check type is Link or Aggregate Link.
{
Contain all: A match occurs when both ends of a link have the match patterns of the rule in their
configuration files.
{
Contain none of them: A match occurs when both ends of a link do not have the match patterns
of the rule in their configuration files.
{
Contain one of them: A match occurs when at least one end of a link has the match patterns of
the rule in its configuration file.