Cisco ASA Series Cli Configuration Manual page 538

Configuring Objects
Detailed Steps
Command
Step 1
object-group network grp_id
Example:
hostname(config)# object-group network
admins
Step 2
description text
Example:
hostname(config-network)# Administrator
Addresses
Step 3
Add one or more of the following group members:
network-object object name
Example:
hostname(config-network)# network-object
host 10.2.2.4
network-object {host ipv4_address |
ipv4_address mask |
ipv6-address/prefix-length}
Example:
hostname(config-network)# network-object
host 10.2.2.4
group-object group_id
Example:
hostname(config-network)# group-object
Engineering_groups
Example
To create a network group that includes the IP addresses of three administrators, enter the following
commands:
hostname (config)# object-group network admins
hostname (config-protocol)# description Administrator Addresses
hostname (config-protocol)# network-object host 10.2.2.4
hostname (config-protocol)# network-object host 10.2.2.78
hostname (config-protocol)# network-object host 10.2.2.34
Create network object groups for privileged users from various departments by entering the following
commands:
hostname (config)# object-group network eng
hostname (config-network)# network-object host 10.1.1.5
Cisco ASA Series CLI Configuration Guide
1-4
Purpose
Adds a network group.
The grp_id is a text string up to 64 characters in length and can be
any combination of letters, digits, and the following characters:
•
underscore "_"
•
dash "-"
•
period "."
The prompt changes to protocol configuration mode.
(Optional) Adds a description. The description can be up to 200
characters.
Adds an object to the network object group.
Adds a host or network inline, either IPv4 or IPv6.
Adds an existing object group under this object group. The nested
group must be of the same type.
Chapter 1 Configuring Objects