Adding a compliance policy, Adding or modifying a rule, Adding or – H3C Technologies H3C Intelligent Management Center User Manual
Page 84: Modifying a rule
75
{
Name—Links to the specific Compliance Policy Details page. For more information, see
Viewing compliance policy details
."
{
Description—Details about the policy description and supported CPE model.
{
Status—Whether the policy is Enabled or Disabled.
{
Type—The policy type as defined by the system or user.
{
Modify—Click to open the Modify page.
{
Delete—Click to delete the specific policy.
In addition, there are five buttons on the top of the Policy List pane:
{
Add—Click to launch the compliance policy adding procedure.
{
Enable All—Click to enable all policies at the same time.
{
Disable All—Click to disable all policies at the same time.
{
Start Check—Click to launch the check task procedure. For more information, see "
."
{
Refresh—Click to refresh the policy list.
Adding a compliance policy
1.
Click Service > BIMS > Compliance Center > Compliance Policy.
2.
On the Compliance Policy page, click Add.
3.
On the Add Compliance Policy page, specify the policy name and the description, then go to the
Rule List pane to add one or more rules.
4.
Click OK.
Adding or modifying a rule
1.
On the Add Compliance Policy page, click Add Rule.
2.
On the Add Rule page, specify a name for the rule.
3.
Select a severity level for the rule. When CPEs violate this rule, the system marks a severity level
information accordingly.
4.
Select a check type as CPE, Interface, or Configuration Segment.
If you select Interface or Configuration Segment, set identifiers as follows:
{
Start Identifier—Specifies where and which commands BIMS will check. For example, if you
enter
interface*,
BIMS checks all command lines that begin with
interface.
{
End Identifier—Specifies where the check will stop. Both the ending symbols
#
and
!
are legal.
5.
Select a configuration file from the list as the Check Target. The two options are: Latest backup
running configuration and Latest backup startup configuration. For more information about these
two configuration file, see "
Querying and viewing CPE configuration list
."
6.
Select a supported vendor from the list.
7.
Select one or more CPE classes by clicking Select Class.
8.
Describe the rule in the Description text box.
9.
Click Yes if you want to enable the Recover function. Also specify the command lines in the Recover
Commands text box. This can be anything you want to recover when the check target violates the
rule. If you enabled the recover function, the contents you enter here can be loaded in the Fixing
commands text box automatically.