Does anyone know if it's possible to add comments to packet filter rules?
I don't think it is possible in 10.x and 11.x code version. The name that you give to the packet filter can serve as the description.
Thanks for the response. I haven't been able to find a way either. I use packet filter rules to lock down management VIPs to only system admins. It would have been nice to add user IDs since some admins work at sites that use DHCP.
Not sure about versions prior to 12.1.2, but you can added a description to each packet filter rule this way:
list net packet-filter all-properties
You will see a description field under each rule. To add a description/comment...
edit net packet-filter <your_rule_name> all-properties
Using Vi interface commands...
Edit your description field...
description "This is my comment"
Exit and save as described above.
The rest of the modifying abilities is recommended to use the Configuration Utility GUI. The descriptions will NOT show in the GUI when done.