Cisco Nexus 9000 Series Configuration Manual page 302

Nx-os security configuration guide, release 9.x
Hide thumbs Also See for Nexus 9000 Series:
Table of Contents

Advertisement

Creating and Changing an IPv6 Address Object Group
4. Enter one of the following commands:
5. (Optional) show object-group name
6. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2
object-group ipv6 address name
Example:
switch(config)# object-group ipv6 address
ipv6-addr-group-A7
switch(config-ipv6addr-ogroup)#
Step 3
Enter one of the following commands:
• [sequence-number] host IPv6-address
• [sequence-number] IPv6-address/prefix-len
• [sequence-number] IPv6-address network-wildcard
Example:
switch(config-ipv6addr-ogroup)# host
2001:db8:0:3ab0::1
Example:
switch(config-ipv6addr-ogroup)# 10 1::1 2::2
Step 4
Enter one of the following commands:
• no sequence-number
• no host IPv6-address
• no IPv6-address/prefix-len
• no IPv6-address network-wildcard
Example:
switch(config-ipv6addr-ogroup)# no host
2001:db8:0:3ab0::1
Step 5
(Optional) show object-group name
Example:
switch(config-ipv6addr-ogroup)# show object-group
ipv6-addr-group-A7
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
276
• no sequence-number
• no host IPv6-address
• no IPv6-address/prefix-len
• no IPv6-address network-wildcard
Purpose
Enters global configuration mode.
Creates the IPv6 address object group and enters IPv6
address object-group configuration mode.
Creates an entry in the object group. For each entry that
you want to create, use the host command and specify a
single host, or omit the host command to specify a network
of hosts.
You can specify a prefix length for an IPv6 object group,
which matches only on the first contiguous bits, or you can
specify a wildcard mask, which matches on any bit in the
address. IPv6 wildcard masks are supported for Cisco Nexus
9200, 9300-EX, and 9300-FX/FX2/FXP switches and the
Cisco Nexus 9364C switch.
Removes an entry from the object group. For each entry
that you want to remove from the object group, use the no
form of the host command.
Displays the object group configuration.
Configuring IP ACLs

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents