ucl-group ip

Function

The ucl-group ip command configures an IP address in a static UCL group. The static UCL group is also called the static resource group.

The undo ucl-group ip command deletes an IP address from a static UCL group.

By default, no IP address is configured in a static UCL group.

IP addresses in static UCL groups are only supported by S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731S-H, S5731-S, S5731S-S, S6720-HI, S5732-H, S6730-H, S6730S-H, S6730-S, S6730S-S, S6720-EI, and S6720S-EI.

Format

ucl-group ip ip-address { mask-length | ip-mask } { group-index | name group-name } [ escape ]

undo ucl-group ip { ip-address { mask-length | ip-mask } | group-index | name group-name | all }

undo ucl-group ip { ip-address { mask-length | ip-mask } | group-index | name group-name } escape

Parameters

Parameter	Description	Value
ip-address	Specifies the IP address of a static UCL group. NOTE: You can specify the IP address configured for the local device.	The value is in dotted decimal notation in the format X.X.X.X.
mask-length	Specifies the mask length of an IP address.	The value is an integer that ranges from 1 to 32.
ip-mask	Specifies the mask of the IP address.	The value is in dotted decimal notation.
group-index	Specifies the index of a static UCL group.	The value is an integer in the range from 1 to 64000 for the S5730-HI, S5731-H, S5731S-H, S5731-S, S5731S-S, S5732-H, S6730-H, S6730S-H, S6730-S, S6730S-S, S6720-HI, and S5720-HI, and from 1 to 48 for the S5720-EI, S6720-EI, and S6720S-EI.
name group-name	Specifies the name of a static UCL group.	The value must be an existing UCL group name on the device.
escape	Specifies an escape static UCL group.	-
all	Specifies all static UCL groups.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In an enterprise network, a server that provides resources has a fixed IP address. The administrator can identify this server using a UCL group and associate the server IP address with the UCL group to form a static UCL group.

After a static UCL group is created for a resource server, the user access policies can be managed based on the static UCL group to simplify network deployment.

Prerequisites

A UCL group has been created using the ucl-group command.

Precautions

In the ubiquitous service solution, this command does not need to be run on the device, and it is configured on the controller and delivered to the device.

UCL groups do not support IP address overlapping. The device cannot allocate users or resources with the same IP addresses in different VPNs to different UCL groups, and can only allocate these users or resources to the same UCL group.

Example

# Configure the static UCL group named email with the IP address 10.1.1.1/24.

<HUAWEI> system-view
[HUAWEI] ucl-group 1 name email
[HUAWEI] ucl-group ip 10.1.1.1 24 name email