199
Step Command Remarks
• Configure a reboot action:
action number reboot [ slot
slot-number ]
• Configure a logging action:
action number syslog priority level
facility local-number msg msg
• Configure an active/standby
switchover action:
action number switchover
Repeat this step to add a
maximum of 232 actions to the
policy.
When you define an action, you
can specify a value or specify a
variable name in
$
variable_name format for an
argument.
5. (Optional.) Assign a
user role to the policy.
user-role
role-name
By default, a monitor policy
contains user roles that its
creator had at the time of policy
creation.
A monitor policy supports a
maximum of 64 valid user roles.
User roles added after this limit
is reached do not take effect.
An EAA policy cannot have both
the
security-audit
user role and
any other user roles. Any
previously assigned user roles
are automatically removed when
you assign the
security-audit
user role to the policy. The
previously assigned
security-audit
user role is
automatically removed when you
assign any other user roles to
the policy.
6. (Optional.) Configure
the policy runtime.
running-time
time
The default runtime is 20
seconds.
7. Enable the policy.
commit
By default, CLI-defined policies
are not enabled.
A CLI-defined policy can take
effect only after you perform this
step.
Configuring a monitor policy by using Tcl
Step Command Remarks
1. Edit a Tcl script file
(see Table 21).
N/A T
he supported Tcl version is 8.5.8.
2. Download the file to
the device by using
FTP or TFTP.
N/A
For more information about using FTP
and TFTP, see Fundamentals
Configuration Guide.
3. Enter system view.
system-view
N/A
4. Create a Tcl-defined
policy and bind it to
the Tcl script file.
rtm tcl-policy
policy-name
tcl-filename
By default, the system does not have Tcl
policies.
This step enables the Tcl-defined policy.
To revise the Tcl script of a policy, you
must suspend all monitor policies first,
and then resume the policies after you
finish revising the script. The system