Cisco ASA Series Cli Configuration Manual page 536

Configuring Objects
Firewall Mode Guidelines
Supported in routed and transparent firewall mode.
IPv6 Guidelines
•
•
•
Additional Guidelines and Limitations
•
•
•
Configuring Objects
•
•
•
•
•
•
Configuring Network Objects and Groups
This section describes how to configure network objects and groups, and it includes the following topics:
•
•
Configuring a Network Object
A network object can contain a host, a network IP address, or a range of IP addresses, a fully qualified
domain name (FQDN). You can also enable NAT rules on the object (excepting FQDN objects). (See
Chapter 1, "Configuring Network Object NAT,"
Cisco ASA Series CLI Configuration Guide
1-2
Supports IPv6.
The ASA does not support IPv6 nested network object groups, so you cannot group an object with
IPv6 entries under another IPv6 object group.
You can mix IPv4 and IPv6 entries in a network object group; you cannot use a mixed object group
for NAT.
Object must have unique names. While you might want to create a network object group named
"Engineering" and a service object group named "Engineering," you need to add an identifier (or
"tag") to the end of at least one object group name to make it unique. For example, you can use the
names "Engineering_admins" and "Engineering_hosts" to make the object group names unique and
to aid in identification.
Objects and object groups share the same name space.
You cannot remove an object or make an object empty if it is used in a command.
Configuring Network Objects and Groups, page 1-2
Configuring Service Objects and Service Groups, page 1-5
Configuring Local User Groups, page 1-11
Configuring Security Group Object Groups, page 1-13
Configuring Regular Expressions, page 1-14
Configuring Time Ranges, page 1-18
Configuring a Network Object, page 1-2
Configuring a Network Object Group, page 1-3
Chapter 1
for more information.)
Configuring Objects