Cisco 4700M Configuration Manual page 49

Chapter 1 Configuring Security Access Control Lists
Simplifying Access Control Lists with Object Groups
To remove the service object group from the configuration, enter:
host1/Admin(config)# no object-group service SERV_OBJ_GROUP1
If you add new elements to an existing object group that is already in use by an
Note
entry in a large ACL, recommitting the ACL can take a long time, depending on
the size of the ACL and the number of elements in the object group. In extreme
cases, recommitting this ACL may cause the ACE to respond to commands slowly
or even to become temporarily unresponsive. We recommend that you first
remove the ACL entry that refers to the object group, make your modifications to
the relevant object group, and then add the ACL entry back into the ACL.
Adding a Description to a Service Object Group
To add an optional description to a service object group, use the description
command in object group service configuration mode. The syntax of this
command is as follows:
description text
The text argument is an unquoted text string with a maximum of 240 alphanumeric
characters.
For example, to add a description to a service object group, enter:
host1/Admin(config)# object-group service SERV_OBJ_GROUP1
host1/Admin(config-objgrp-serv)# description intranet network object
group
To remove a description from a service object group, enter:
host1/Admin(config)# object-group service SERV_OBJ_GROUP1
host1/Admin(config-objgrp-serv)# no description intranet network
object group
Cisco 4700 Series Application Control Engine Appliance Security Configuration Guide
1-25
OL-16202-01