Cisco Catalyst 4500 Series Software Configuration Manual page 1665

Cisco ios xe release 3.9.xe and cisco ios release 15.2(5)ex
Hide thumbs Also See for Catalyst 4500 Series:
Table of Contents

Advertisement

Chapter 62
Configuring Network Security with ACLs
Command or Action
Step 3
description descripton-text
Example:
Switch(config-network-group)# description test
engineers
Step 4
host {host-address | host-name}
Example:
Switch(config-network-group)# host
209.165.200.237
Step 5
network-address {/nn | network-mask}
Example:
Switch(config-network-group)# 209.165.200.241
255.255.255.224
Step 6
group-object nested-object-group-name
Example:
Switch(config-network-group)# group-object
my-nested-object-group
Step 7
Repeat the steps until you have specified objects on
which you want to base your object group.
Step 8
end
Example:
Switch(config-network-group)# end
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Purpose
(Optional) Specifies a description of the object group.
You can use up to 200 characters.
(Optional) Specifies the IP address or name of a host.
If you specify a host address, you must use an IPv4 address.
(Optional) Specifies a subnet object.
You must specify an IPv4 address for the network address.
The default network mask is 255.255.255.255.
(Optional) Specifies a nested (child) object group to be
included in the current (parent) object group.
The child object group type must match that of the parent
(for example, if you are creating a network object group,
you must specify another network object group as the
child).
You can use duplicated objects in an object group only by
nesting group objects. For example, if object 1 is in both
group A and group B, you can define a group C that
includes both A and B. However, you cannot include a
group object that causes the group hierarchy to become
circular (for example, you cannot include group A in group
B and then also include group B in group A).
While you can have an unlimited number of nested levels
we recommend a maximum of two levels.
Exits network object-group configuration mode and returns
to privileged EXEC mode.
Configuring Object Group ACLs
62-41

Advertisement

Table of Contents
loading

Table of Contents