Object-Group (Identity Policy) - Cisco Nexus 7000 Series Command Reference Manual

object-group (identity policy)

object-group (identity policy)
To specify a MAC access control list (ACL) for an identity policy, use the object-group command. To remove
ACL from the identity policy, use the no form of this command.
object-group acl-name
no object-group acl-name
Syntax Description
acl-name
Command Default
None
Command Modes
Identity policy configuration
Command History
Release
4.0(1)
Usage Guidelines
Use the mac access-list command to create the MAC ACL to assign to the identity policy.
This command does not require a license.
Examples This example shows how to configure an ACL for an identity policy:
switch# configure terminal
switch(config)# identity policy AdminPolicy
switch(config-id-policy)# object-group
This example shows how to remove an ACL from an identity policy:
switch# configure terminal
switch(config)# identity policy AdminPolicy
switch(config-id-policy)# no object-group
Related Commands
Command
identity policy
mac access-list
show identity policy
Cisco Nexus 7000 Series Security Command Reference
516
Name of a MAC ACL. The name is case sensitive.
Modification
This command was introduced.
Description
Creates or specifies an identity policy and enters
identity policy configuration mode.
Creates a MAC ACL and enters MAC ACL
configuration mode.
Displays identity policy information.
O Commands