Cisco Catalyst 4500 Series Configuration Manual page 569

Chapter 2
Command Default This command has no default settings
Command Modes Global configuration mode
Command History Release
3.71E and 15.2(3)E1
3.72E and 15.2(3)E2
Usage Guidelines This command supports only IPv4 addresses.
Commands within the object group configuration mode appear indented when saved or displayed using
the write memory or show running-config commands.
Commands within the group configuration mode (config-network-group or config-service-group) have
the same command privilege level as the main command.
The command supports unlimited number of nested object groups; however, we recommend no more
than two levels.
The type of child object group must match the type of the parent (for example, if you create a network
object group, the child object group that you specify must be another network object group).
The switch ignores all empty object groups. When an ACE uses an empty object-group, that ACE is not
expanded, as if there is no such ACE.
When you enter the no form of the command to delete an object group, the switch does one of the
following:
•
•
You cannot delete an object group that is being used within an ACL or CPL policy.
If an object group that you are trying to use in an ACE is not previously defined, the switch rejects the
command. For example,
Switch(config)#ip access-list extend acl-1
Switch(config-ext-nacl)#permit ip object-group OG-1 any
OG-1 doesn't exist, this line is rejected.
Specifics for network groups
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/m1/sec-m1-cr-book/sec-cr-m2.html#wp275
4379810
Specifics for service groups
Modification
This command was introduced.
Enhancements were made to the no version of the command
If the object group is being used somewhere, the switch removes all the entries of the object group,
making this an empty object group.
If the object group is not being used anywhere, the switch deletes it.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
object-group
2-529